<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<blockquote
cite="mid:Pine.LNX.4.64.0709101635540.6223@newtla.xelerance.com"
type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre wrap="">If you define dpdaction= and dpdtimeout=, then DPD is enabled.
</pre>
</blockquote>
<pre wrap="">Tried this out. Unfortunately it doesn't work. Today the tunnel has been
down again: hard. I had to restart ipsec/openswan 3 times on each side
before the connection went up again. Is openswan not safe against a
changing IP? I know one side is currently a joy killer since the IP is
dynamic but if I have to manually log in both machines to bring the
tunnel ( which should be up all time ) then this is a problem. Any ideas
why DPD could fail to work?
</pre>
</blockquote>
<pre wrap=""><!---->
Both ends need to support and enable DPD for it to get enabled on an SA.
Paul
</pre>
</blockquote>
I did enable it on both ends by copy pasting the three lines over so
they are identical.<br>
<br>
<div class="moz-signature">-- <br>
Yours sincerely<br>
Plüss Roland<br>
<br>
</div>
</body>
</html>