[Openswan Users] Question on DPD

Nick Howitt n1ck.h0w1tt at gmail.com
Tue Nov 22 06:41:18 EST 2011


I have a conn with the far end on a (not very) dynamic IP which I know 
is not ideal. I would like to initiate the conn from my end so I have 
"right=far.end.fqdn" which is fine and works until the far IP changes. 
If the far IP changes I don't think using dpdaction=restart will 
re-evaluate the fqdn. Is this correct? If that is the case do I need a 
watching script to detect when a change of IP happens? ipsec.secrets is 
fine as I use @rightid.

Thanks,

Nick


More information about the Users mailing list