[Openswan Users] Problem with DPD.

Paul Wouters paul at xelerance.com
Sat Nov 8 13:54:33 EST 2008


On Sat, 8 Nov 2008, Benny Amorsen wrote:

> Paul Wouters <paul at xelerance.com> writes:
>
>> Not when you --down'ed the tunnel. Then the tunnel is no longer active,
>> and the options within that tunnel (dpdaction=) is not there anymore.
>
> I mean when the remote end does --down, and the local end has
> dpdaction=restart. I would prefer if the local end did a restart in
> that case.

If you have auto=start on the local end that should work (though it might
not work with netkey at the moment). But the whole mechanism of restarting
a tunnel on demand, is separate from restarting tunnels that seem to have
gone bad. DPD is only meant for the latter.

Paul


More information about the Users mailing list