[Openswan Users] One question about dpd

Paul Wouters paul at xelerance.com
Tue May 8 12:59:30 EDT 2007


On Tue, 8 May 2007, Juan Pablo wrote:

> I have an OpenSwan 2.4.7 with a couple of Roadwarriors. The
> Roadwarriors support dead peer detection but they don't allow to
> configure those parameters as Openswan do.
>
> In Openswan I have;
> dpddelay=30
> dpdtimeout=120
> dpdaction=clear
>
> I appreciate if you can clarify me if these parameters are negotiated
> during Main Mode or each peer is going to send ARE_U_THERE packets
> independently?

Each peer decides independantly. The only promise they commit to, is
that if they announce DPD capability, they will stick to answering DPD
ARE_U_THERE packets.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155


More information about the Users mailing list