[Openswan Users] Persistent connection for VPN connection

[Kevin]

What type of internet connections are each endpoint using and how stable 
are they?  I ask this because I had problems with tunnels apparently not 
staying up and it turned out that the internet connection dropping out 
even for a very short time was causing the problem.

Regards
Kevin

Paul Wouters wrote:

>On Mon, 18 Jun 2007, Peter Njiiri wrote:
>
>  
>
>>The connection is Gatewat-to_gateway connection using FreeSwan (ipsec.conf) will adding the rekey=yes line work for FreeSwan? Thanks for the feedback
>>    
>>
>
>See below on the remark when one of the endpoints is on dynamic ip (roadwarrior).
>AFAIK, freeswan also had rekey=yes as the default, so i dont think it is going to help you.
>
>freeswan is unsupported and has not seen all required security patches. You should migrate
>to openswan.
>
>Paul
>
>  
>
>>Regards,Peter
>>
>>    
>>
>>>>>Paul Wouters <paul at xelerance.com>  >>>
>>>>>          
>>>>>
>>On Mon, 18 Jun 2007, Peter Njiiri wrote:
>>
>>    
>>
>>>I just need to know how a persistent connection can be established when VPN is up. I always have to restart the VPN after some hours as it seems that the SA connection/handshake is dropped?Is there a line that can be added into the ipsec.conf file??? I need the VPN to be running consistently 24-7?
>>>      
>>>
>>If you use rekey=yes (the default!) then it should work already. If this is a roadwarrior connection,
>>then the roadwarrior has to initiate the rekey and the server should use rekey=no.
>>
>>Paul
>>
>>    
>>
>
>  
>


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.