<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<blockquote
cite="mid:Pine.LNX.4.64.0709081126550.3237@newtla.xelerance.com"
type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">If you are doing NAT-Traversal, your NAT router might be timing out the
port mapping.
</pre>
</blockquote>
<pre wrap="">No, this should not be the case. I have the following setup:
company/home ( both the same ):
- ADSL router set to forward all connections to the server ( hence a 1:1
mapping sort of )
</pre>
</blockquote>
<pre wrap=""><!---->
That is NAT, and your NAT router will keep and expire state.
</pre>
</blockquote>
Now I'm confused. I have a 1:1 mapping hence I simply forward all
traffic to the server. I do not want to have any NAT state in this one
since my server is doing all the NATing and IPtabling.<br>
<blockquote
cite="mid:Pine.LNX.4.64.0709081126550.3237@newtla.xelerance.com"
type="cite">
<blockquote type="cite">
<pre wrap="">- Gentoo server with OpenSwan with iptables set to not masquerade the
VPN traffic
</pre>
</blockquote>
<pre wrap=""><!---->
If they have public ips right, if they have private ip's, there is NAT
state.
</pre>
</blockquote>
One has a static public and registered IP. The other has a dynamic one
( did not get around to request a static IP yet ).<br>
<blockquote
cite="mid:Pine.LNX.4.64.0709081126550.3237@newtla.xelerance.com"
type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">You have to first figure out why it is going down. Are both sides openswan?
If both end support DPD, you can enable that.
</pre>
</blockquote>
<pre wrap="">What is DPD in OpenSwan?
</pre>
</blockquote>
<pre wrap=""><!---->
Dead Peer Detection, see dpdaction=,dpdaction=,dpdtimeout.
</pre>
</blockquote>
So for my case I would need dpdaction=restart, dpdtimeout=60 and
dpddelay=30 . But the man page says I need to activate dpd for a
connection. How am I supposed to do this? I found nothing in the man
page about it.<br>
<br>
<div class="moz-signature">-- <br>
Yours sincerely<br>
Plüss Roland<br>
<br>
</div>
</body>
</html>