Hi All,<br>I have a gateway-gateway tunnel setup using OpenSwan version 2.6.16 and have DPD enabled with dpddelay=60, dpdtimeout=120 and dpdaction=hold.<br>I am facing a problem when I bring one end of the tunnel down( ipsec auto --down 'tunnel name' followed by ipsec auto --delete 'tunnel name' ).<br>
I was expecting the other end to detect the tunnel being down and the updown script( I have configured my own updown script ) to get called, but this is not happening.<br>ipsec auto --status on this gateway shows the last 2 lines as<br>
<br>"000 "sample": dpd: action:hold; delay:60; timeout:120;<br> 000 "sample": newest ISAKMP SA: #0; newest IPsec SA: #0;"<br><br>The tunnel is obviously not established because there is no line containing "IPsec SA established" anywhere in the output of ipsec auto --status.<br>
<br>My question is, why is the updown script not getting called in this case?<br>Any help will be appreciated.<br>Also, please tell me if any other info is needed.<br><br><br>thanks,<br>-anirudh<br>