[Openswan Users] Fail over IP + Openswan: Building and Integrating Virtual Private Networks

[Paul Wouters]

On Sat, 11 Oct 2008, Igor Widlinski wrote:

> I wonder why there is only couple of options for when dead peer is
> detected.. ie hold, restart... It would be nice if we could just specify a
> scrip to execute when a peer is detected dead.
> ie. dpdaction=/path/to/script.

You do that via the leftupdown=/some/script option. The dpdaction= just
states what to do with the tunnel itself.

> Also we ended up buying the book, and as you said chapter 11 does not
> solve the above issue, but the book is still an awesome resource to help
> to get openswan going. We've added extra parameters to our config, as well
> as learned more technical insight into how ipsec with openswan works.

Great!

Paul