[Openswan Users] Re: DPD

[Paul Wouters]

On Wed, 9 Aug 2006, Shi Lang wrote:

> Recently I upgrade my openswan, and two sites establish one Site-to-site
> VPN, both sites set the DPD=clear.
>
> I purposely unplug one Site server Ethernet cable, and I can see both site
> servers DPD clear SAs and unrouted.
>
> But the problem is when I re-plugin the cable, site-to-site will not be
> re-established. 'ipsec auto status' are still showing unrouted.

> I do not know is this the correct behavior or not for such case where unplug
> the cable, dpd will not work in order to re-establish the Site-to-site VPN.

Do you have:

	auto=start
	dpdaction=restart

on both ends?

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155