How to monitor IPSec and improve connection?

V

Vi2017-10-05 05:12:58

linux

Vi, 2017-10-05 05:12:58

I have a connection to a remote IPsec partner, he has a cisco ASA, and I'm not really aware of what TIME values \u200b\u200bhe wrote there of the keepalive type (and they don’t give out information)
So I would like to know what tools for monitoring IPsec (strongswan) on Linux exist?
As well as the question
established 18938s ago, reauth in 66511s
installed 13182s ago, rekeying in 72176s, expires in 73219s
How to make these values always only grow and not reset (screenshot below)

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

C

CityCat4, 2017-10-05
@CityCat4

Enable logging in strongswan - when passing the first phase, there will be exchange timings, and in the second phase there will be own timings. But depending on who clings to whom and how the connection is negotiated, the timings can be selected from the minimum of the two agreed options. That is, they cannot be increased, they can only be reduced. In general, they are already large enough for you.