Create Child SA

Q/A
#1

Hi Free5gc Team,
After ipsec tunnel establishment, I sent a PDU session establishment request message and was able to receive the Create child SA request message from the N3IWF core. But in the free5gc it was sending the request message as a initiator, and not as responder. During the first IKE SA INIT message Strongswan sends the IKE message as the initiator, and I thought free5gc should send the Create Child SA message as a responder perspective, but since it is sending it with initiator flag on, Strongswan is having a issue processing the message. Please guide me for this issue.

Thank you

#2

Hi @joseph1267,
I had understood. The flag of the CREATE_CHILD_SA request sent by N3IWF for PDU session establishment should be 0x0, namely a request from the IKE responder. We’re fixing the bug.

#3