[Openswan Users] Tunnel goes down for no reason

Roland Plüss roland at rptd.ch
Mon Sep 10 19:40:54 EDT 2007


>>> If you define dpdaction= and dpdtimeout=, then DPD is enabled.
>>>
>>>       
>> Tried this out. Unfortunately it doesn't work. Today the tunnel has been
>> down again: hard. I had to restart ipsec/openswan 3 times on each side
>> before the connection went up again. Is openswan not safe against a
>> changing IP? I know one side is currently a joy killer since the IP is
>> dynamic but if I have to manually log in both machines to bring the
>> tunnel ( which should be up all time ) then this is a problem. Any ideas
>> why DPD could fail to work?
>>     
>
> Both ends need to support and enable DPD for it to get enabled on an SA.
>
> Paul
>   
I did enable it on both ends by copy pasting the three lines over so
they are identical.

-- 
Yours sincerely
Plüss Roland

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070911/e1612daa/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.openswan.org/pipermail/users/attachments/20070911/e1612daa/attachment.bin 


More information about the Users mailing list