[Openswan Users] Fail over IP + Openswan: Building and Integrating Virtual Private Networks
paul at xelerance.com
Mon Oct 13 13:52:05 EDT 2008
On Sat, 11 Oct 2008, Igor Widlinski wrote:
> I wonder why there is only couple of options for when dead peer is
> detected.. ie hold, restart... It would be nice if we could just specify a
> scrip to execute when a peer is detected dead.
> ie. dpdaction=/path/to/script.
You do that via the leftupdown=/some/script option. The dpdaction= just
states what to do with the tunnel itself.
> Also we ended up buying the book, and as you said chapter 11 does not
> solve the above issue, but the book is still an awesome resource to help
> to get openswan going. We've added extra parameters to our config, as well
> as learned more technical insight into how ipsec with openswan works.
More information about the Users