[Openswan Users] Checkpoint connection problems

[Paul Wouters]

On Sun, 15 Aug 2004, Brent Foster wrote:

> connection to a Checkpoint FW1 box and the tunnel works fine, except
> that it will stop working
> after a few hours.  Sometimes it will auto-recover, sometimes I have to
> -down and -up the 
> tunnel.  In all cases OpenSwan thinks the tunnel is up and will route
> traffic across the ipsec0 interface.

>         keylife=8h

Try setting the keylife to 1h. That will force Openswan to rekey before
the Checkpoint gets into its (I guess buggy) state. If it works, can you
send a message back to the list so we can update our Wiki?

I am not sure what happened to the october 2003 archive, it only starts from
december 2003. Perhaps we moved servers and lost the archive at that point.

Paul