<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Actually, DPD is intended to be *the* reliable mechanism to detect
IPSec outages...correct?<br>
<br>
Erich Titl wrote:
<blockquote cite="mid:4ACE4B5B.9070400@think.ch" type="cite">
<pre wrap="">Paul
Paul Wouters wrote:
</pre>
<blockquote type="cite">
<pre wrap="">On Thu, 8 Oct 2009, Erich Titl wrote:
</pre>
<blockquote type="cite">
<pre wrap="">If everything fails....
I am running FreeSWan/OpenSWan tunnels for a number of years now and had
my share with unreliable tunnels. I had pretty good success to
reestablish failed connections by runnning a script in the background
which periodically checks the connectivity to the peer, actually it
checks the response to an ICMP echo sent to the inside interface of the
remote network. It needed a bit fiddeling with iproute2 but it was worth
the effort. I found it reacted a lot faster than any DPD stuff and did
not depend on its implementation.
</pre>
</blockquote>
<pre wrap="">And it will likely fire false positives on congested links :)
</pre>
</blockquote>
<pre wrap=""><!---->
Possibly, but who can say DPD is alwways right :-) Whatever, not
depending on a single indicator is always good.
Erich
</pre>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@openswan.org">Users@openswan.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<style type="text/css">
p { margin: 0; }
</style>
<div style="font-family: Arial; font-size: 10pt; color: rgb(0, 0, 0);">
<font size="1"> Diego Rivera<br>
Director / System Operations<br>
Roundbox Global : <span
style="font-style: italic; color: rgb(102, 102, 102);">enterprise :
technology : genius</span><br>
------------------------------------------------------------------------------------------------------------------<br>
Avenida 11 y Calle 7-9, Barrio Amón, San José, Costa Rica<br>
tel: +1 (404) 567-5000 ext. 2147 | cel: +(506) 8393-0772 | fax: +(506)
2258-3695<br>
email: <a href="mailto:diego.rivera@rbxglobal.com">diego.rivera@rbxglobal.com</a>
| <a href="http://www.rbxglobal.com">www.rbxglobal.com</a><br>
------------------------------------------------------------------------------------------------------------------<br>
</font> </div>
</div>
</body>
</html>