[Openswan Users] Tunnel goes down for no reason
paul at xelerance.com
Sat Sep 8 11:28:25 EDT 2007
On Sat, 8 Sep 2007, Roland Plüss wrote:
> > If you are doing NAT-Traversal, your NAT router might be timing out the
> > port mapping.
> No, this should not be the case. I have the following setup:
> company/home ( both the same ):
> - ADSL router set to forward all connections to the server ( hence a 1:1
> mapping sort of )
That is NAT, and your NAT router will keep and expire state.
> - Gentoo server with OpenSwan with iptables set to not masquerade the
> VPN traffic
If they have public ips right, if they have private ip's, there is NAT
> > You have to first figure out why it is going down. Are both sides openswan?
> > If both end support DPD, you can enable that.
> What is DPD in OpenSwan?
Dead Peer Detection, see dpdaction=,dpdaction=,dpdtimeout.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users