[Openswan dev] DPD issue with multiple tunnels between two peers

Michael Richardson mcr at xelerance.com
Mon Jul 9 11:45:16 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


>>>>> "Benny" == Benny Amorsen <benny+usenet at amorsen.dk> writes:
    DM> Nothing really, just that we added the restart_by_peer option to
    DM> openswan, and it got bundled up with the OCF work we did as
    DM> well.

    Benny> Which openswan releases have the restart_by_peer option? It
    Benny> seems to me that restart_by_peer is the right thing to do in
    Benny> all cases, so that dpdaction=restart should go away (or just
    Benny> be translated to restart_by_peer)

  Restarting is not the right action all the time.
  Sometimes, having the conn disappear is the right action.

- -- 
]            Bear: "Me, I'm just the shape of a bear."          |  firewalls  [
]   Michael Richardson,    Xelerance Corporation, Ottawa, ON    |net architect[
] mcr at xelerance.com      http://www.sandelman.ottawa.on.ca/mcr/ |device driver[
] panic("Just another Debian GNU/Linux using, kernel hacking, security guy"); [



  
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Finger me for keys

iQEVAwUBRpJYCYCLcPvd0N1lAQIQXgf/UUFiflG2T/xGVeOfIpnHp+rStHLkaY8o
X+iqpJA/vCfRkueciGDWQa9m/F1qu73txvMFBrTrKrO3koevx5eYIDY0XwkuK6E2
y660jSJf/9Z4zFPslyXWDjAkD7Y4HLLtaR/u19+/xFj7XXgvgYlEY2W4Xt33PpCS
Hfvq5cfQM1PZg9BVDtTxM/PIO7bBPEnK6TrLC+qB5U87BktyIkrs05nRbUAmYTT9
UVnNWRq3PkvcMo5wgwqcA4IhIKM50tVct/Yi9hzGAnCOnPVugDEASlEaeWpZ8slM
TeL0SRLfrPzpuOBPCDRg4zXZKP1S0Xm9Q95QyEcdtxV6S/CIUCWBcg==
=W+VW
-----END PGP SIGNATURE-----


More information about the Dev mailing list