[Openswan Users] RE: DPD

[Paul Wouters]

On Thu, 10 Aug 2006, Shi Lang wrote:

> Thanks very much for the explanation.
>
> If Site-to-site VPN, one site is behind NAT and if NAT changes the public IP
> for that site mapping, or this site is located in the PPPoE dial-up case.
> The dpdaction should be which one?

That is a roadwarrior scenario. So dpdaction=clear on the site with the public
ip, and dpdaction=restart on the server behind nat.

Paul