[Openswan Users] Which 2.6 kernel?

[Paul Wouters]

On Tue, 31 Jan 2006, Oliver Tomkins wrote:

> However, if the connection is left idle it appears to automatically disconnect
> and they are not able to reconnect until a reboot/restart on the ipsec/l2tpd
> server.

do you have uniqueids=yes  in config setup?

> Following this type of disconnection I can also see outbound traffic (isakmp)
> from the VPN server to the client although the client has disconnected.
>
> I'm using Fedora Core 4 (2.6.14-1.1656_FC4), Netkey and Openswan U2.4.4.
>
> From having a quick look through here it appears there are problems with the
> kernel shipped with Fedora and  I should use a vanilla kernel?

I don't think you are running into kernel problems here. This seems like either
a userland problem, or a bad NAT router that is terminating the connection without
telling either end.

> Is there a preferred version of the 2.6 kernel for use with Openswan?

non-fedora if on smp.

Paul