On Thu, 10 Aug 2006, Shi Lang wrote: > I have a doubt that when dpdaction=clear and reach dpdtimeout, the #19#25 > lines will be deleted. Is the whole "Private_test1" will be deleted also > (like ipsec auto --delete Private_test1")? Yes, with dpdaction=clear that will happen. With dpdaction=hold it will be the equivalent of ipsec auto --down Private_test1. Paul