[Openswan Users] Re: need help related to DPD
utkarsh at elitecore.com
Sat Mar 25 10:17:08 CET 2006
Thanks for your help.
but actually i would like to know what is use of eroute putting it in
%hold status or when will it be put in normal status.
and related to connection type i have sperified properconnection type
i use Linux Openswan U2.4.4/K2.4.5rc4 (klips) version an config is like
and at other side
we don't require nat-t support.
and can u suggest me configuration for a net-to-net scenatio where one
or both of server have private ip or both of them are behind NAT-Box.
----- Original Message -----
From: "Paul Wouters" <paul at xelerance.com>
To: "utkarsh shah" <utkarsh at elitecore.com>
Cc: <users at openswan.org>
Sent: Friday, March 24, 2006 8:49 PM
Subject: Re: need help related to DPD
> On Fri, 24 Mar 2006, utkarsh shah wrote:
> > i would like to know exact difference between
> from the ipsec.conf man page:
> dpdaction When a DPD enabled peer is declared dead, what
> should be taken. hold (default) means the eroute
> be put into %hold status, while clear means the
> and SA with both be cleared. dpdaction=clear is
> only usefull on the server of a Road Warrior config.
> > if we select type=tunnel at one end and transport at other, based on
initiator it selects type.. does it allow such behaviour.
> Please first try to just specify the proper type of the tunnel, so if you
> transport mode, please use type=transport. In pre 2.4.5rcX versions, there
> was a bug with combining type=transport and rightsubnet=vhost:%priv which
> needed for NAT-T. In that case, you may comment out type=transport, but
> you upgrade, you will have to put it back in.
> Building and integrating Virtual Private Networks with Openswan:
More information about the Users