<div dir="ltr">What about "closeaction=restart", may it help?<br><br>On Sunday, April 26, 2015 at 7:49:55 PM UTC+2, Noel Kuntze wrote:<blockquote class="gmail_quote" style="margin: 0;margin-left: 0.8ex;border-left: 1px #ccc solid;padding-left: 1ex;"><br>-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA256<p>Hello Daniel,</p><p>Try keyingtries=%forever</p><p>Mit freundlichen Grüßen/Kind Regards,<br>Noel Kuntze</p><p>GPG Key ID: 0x63EC6658<br>Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658</p><p>Am 26.04.2015 um 16:31 schrieb Daniel Pocock:<br>><br>><br>> I have StrongSWAN on an OpenWRT router<br>><br>> ipsec version reports:<br>> Linux strongSwan U5.0.4/K3.3.8<br>><br>><br>> Sometimes the DSL goes down and comes up again within a minute or so but<br>> the VPN doesn't always re-establish itself.<br>><br>> I have the following in /etc/ipsec.conf:<br>><br>> config setup<br>>     # strictcrlpolicy=yes<br>>     # uniqueids = no<br>><br>> # Add connections here.<br>><br>> conn vpn<br>>     left=%defaultroute<br>>     leftid=@<a href="http://wrt1.example.org" target="_blank" rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\75http%3A%2F%2Fwrt1.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNE9mnzhnVJ8E043Tq5Ne85NIcScgA';return true;" onclick="this.href='http://www.google.com/url?q\75http%3A%2F%2Fwrt1.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNE9mnzhnVJ8E043Tq5Ne85NIcScgA';return true;">wrt1.example.org</a><br>>     leftcert=wrt1Cert.der<br>>     leftsubnet=<a href="http://192.168.1.0/24,2001:1234:5678:0::/64" target="_blank" rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\75http%3A%2F%2F192.168.1.0%2F24%2C2001%3A1234%3A5678%3A0%3A%3A%2F64\46sa\75D\46sntz\0751\46usg\75AFQjCNFtErgk6N_tt2gX4vjwuNEILyW_Og';return true;" onclick="this.href='http://www.google.com/url?q\75http%3A%2F%2F192.168.1.0%2F24%2C2001%3A1234%3A5678%3A0%3A%3A%2F64\46sa\75D\46sntz\0751\46usg\75AFQjCNFtErgk6N_tt2gX4vjwuNEILyW_Og';return true;">192.168.1.0/24,<wbr>2001:1234:5678:0::/64</a><br>>     leftfirewall=no<br>>     lefthostaccess=no<br>>     right=<a href="http://vpn.example.org" target="_blank" rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\75http%3A%2F%2Fvpn.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNHheoAy_mgXn5ZBl86NKFs42-QM-w';return true;" onclick="this.href='http://www.google.com/url?q\75http%3A%2F%2Fvpn.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNHheoAy_mgXn5ZBl86NKFs42-QM-w';return true;">vpn.example.org</a><br>>     rightid=@<a href="http://vpn.example.org" target="_blank" rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\75http%3A%2F%2Fvpn.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNHheoAy_mgXn5ZBl86NKFs42-QM-w';return true;" onclick="this.href='http://www.google.com/url?q\75http%3A%2F%2Fvpn.example.org\46sa\75D\46sntz\0751\46usg\75AFQjCNHheoAy_mgXn5ZBl86NKFs42-QM-w';return true;">vpn.example.org</a><br>>     rightsubnet=<a href="http://198.51.100.0/24,2001:abcd:1234:1000::/52" target="_blank" rel="nofollow" onmousedown="this.href='http://www.google.com/url?q\75http%3A%2F%2F198.51.100.0%2F24%2C2001%3Aabcd%3A1234%3A1000%3A%3A%2F52\46sa\75D\46sntz\0751\46usg\75AFQjCNECm9wBp1djFyJs6RPSZCH-9YCHEQ';return true;" onclick="this.href='http://www.google.com/url?q\75http%3A%2F%2F198.51.100.0%2F24%2C2001%3Aabcd%3A1234%3A1000%3A%3A%2F52\46sa\75D\46sntz\0751\46usg\75AFQjCNECm9wBp1djFyJs6RPSZCH-9YCHEQ';return true;">198.51.100.0/24,<wbr>2001:abcd:1234:1000::/52</a><br>>     keyexchange=ikev2<br>>     auto=start<br>>     dpdaction=restart<br>><br>><br>> Is there anything else I should do to ensure this VPN is always up?<br>><br>> The OpenWRT device almost always gets the same IP address from the ISP,<br>> but it is not guaranteed to be static, so it can only be started from<br>> OpenWRT and not from the other end of the link.<br>><br>> ______________________________<wbr>_________________<br>> Users mailing list<br>> <a href="mailto:Users@lists.strongswan.org" target="_blank" rel="nofollow" onmousedown="this.href='mailto:Users@lists.strongswan.org';return true;" onclick="this.href='mailto:Users@lists.strongswan.org';return true;">Users@lists.strongswan.org</a><br>> <a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank" rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\75https%3A%2F%2Flists.strongswan.org%2Fmailman%2Flistinfo%2Fusers\46sa\75D\46sntz\0751\46usg\75AFQjCNHpb2EWexg7wtvkBUUWojs4DgFnHQ';return true;" onclick="this.href='https://www.google.com/url?q\75https%3A%2F%2Flists.strongswan.org%2Fmailman%2Flistinfo%2Fusers\46sa\75D\46sntz\0751\46usg\75AFQjCNHpb2EWexg7wtvkBUUWojs4DgFnHQ';return true;">https://lists.strongswan.org/<wbr>mailman/listinfo/users</a></p><p>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v2</p><p>iQIcBAEBCAAGBQJVPSU2AAoJEDg5KY<wbr>9j7GZYlfIQAI9MbewhArRBxxLxNjNW<wbr>DMDm<br>/ZLzlb5HAq+<wbr>VhshcCK67SR5iBn6pin2tLyn7bX3fN<wbr>oDpKX2idf6z+EuqMKbT3lq9<br>ReEjCfy596P8XUjEciJwCJovI6taN3<wbr>fvpoOYyhYuu1iNjonqPcXaS/<wbr>aTyhG4W4qG<br>NEj74WAIKbmd88Lg8/<wbr>BHZF3iHujq3BQih0R0U3oXmvken7GU<wbr>iu23IwG27dIbT2dQ<br>Atm8HV+kS6+<wbr>X5qeGGGuWz0tsA5v17iUTOtPBkyJFJ<wbr>sWc0QMe8kSGE9Lt5tHWE8oA<br>9ya4ISywE1m0/<wbr>2xX1WxzGJz2oL4cKpCR7//Nh+MGYy/<wbr>Y9r/KKYfVRpp8ymxd/n31<br>0PChDl2oVao0Y7oDxQr1ySUDcW/<wbr>XwqMTJfWw8pacoyvyxpJ2zG81V/<wbr>RPXwyPokM3<br>JkimgZtrSUPOOy7tekH6/9Md/<wbr>R4JIefKtVm7CblDshQSIzjfbWcFs6e<wbr>rRjZEpoj9<br>JxP5ttZHF2HkO6zQyvIpKwpOcmpZD7<wbr>Oo7UgVMb/KfGJu9u4wWAG0MUOU/<wbr>5xxyCvb<br>jKg1rf/<wbr>9DleGwDmp25iEbVZJ2GCv7gx1ze8B+<wbr>wk2141ABVEVs7hrwKhjzDOY7oY7<br>V1bYGSemEF05dOe8ZeJ+<wbr>pQcnpVLgGweU+<wbr>EYY96eWJvJGxervFym1ZP3FeHQqLza<wbr>L<br>6Mr+OHv+6j3GKc7K+F6E<br>=mltC<br>-----END PGP SIGNATURE-----</p><p>______________________________<wbr>_________________<br>Users mailing list<br><a href="mailto:Users@lists.strongswan.org" target="_blank" rel="nofollow" onmousedown="this.href='mailto:Users@lists.strongswan.org';return true;" onclick="this.href='mailto:Users@lists.strongswan.org';return true;">Users@lists.strongswan.org</a><br><a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank" rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\75https%3A%2F%2Flists.strongswan.org%2Fmailman%2Flistinfo%2Fusers\46sa\75D\46sntz\0751\46usg\75AFQjCNHpb2EWexg7wtvkBUUWojs4DgFnHQ';return true;" onclick="this.href='https://www.google.com/url?q\75https%3A%2F%2Flists.strongswan.org%2Fmailman%2Flistinfo%2Fusers\46sa\75D\46sntz\0751\46usg\75AFQjCNHpb2EWexg7wtvkBUUWojs4DgFnHQ';return true;">https://lists.strongswan.org/<wbr>mailman/listinfo/users</a></p><p></p><p></p><p></p><p></p><p></p><p></p><p></p></blockquote></div>