[Openswan Users] vpn connection after internet reconnect

[Andy]

On Sun, 2006-01-15 at 12:55 +0100, Andreas Lüdtke wrote:
> My internet provider is dropping my dsl line every 24 hours. After such a dsl reconnect,
> the vpn connection can only be re-established by stopping/starting Openswan.
> These are the error messages I get:
> 
> Jan 15 05:57:16 (none) kern.warn pluto[6220]: "COMPANY" #25: ISAKMP SA expired (LATEST!)
> Jan 15 05:59:10 (none) kern.warn pluto[6220]: "COMPANY" #26: max number of retransmissions
> (20) reached STATE_MAIN_I1.  No response (or no acceptable response) to our first IKE
> message
> Jan 15 05:59:10 (none) kern.warn pluto[6220]: "COMPANY" #26: starting keying attempt 2 of
> an unlimited number
> Jan 15 05:59:10 (none) kern.warn pluto[6220]: "COMPANY" #27: initiating Main Mode to
> replace #26
> 
> I help myself in running a cron job that will stop ipsec before the dsl line disconnects,
> and that start ipsec after the dsl is back online.
>  
> Is there a better way of doing this (without stopping/starting ipsec)?
>  
Probably your IP address changes when your DSL reconnects. You need to
restart in that case.
Is this a PPPOE connection? If so, you can restart Openswan from
the /etc/ppp/ip-up.local script.

> Andreas
> 
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
-- 
Andy <fs at globalnetit.com>