<div dir="ltr"><div></div>Hi and thank you Noel,<br>I meant to run ipsec and charon in the embedded openwrt router, I use dpd as well<br><br><pre> # dead-peer detection to clear any "dangling" connections in case the client unexpectedly disconnects
<a name="ipsec.conf-16"></a> dpdaction=clear
<a name="ipsec.conf-18"></a> # If the tunnel has no traffic for this long (default 30 secs), Charon will send a dead peer detection packet. The value 0 means to not send such packets, relying on ordinary traffic, which will occur at least once an hour, which is the default rekeying lifetime.
<a name="ipsec.conf-19"></a> dpddelay=33s
<a name="ipsec.conf-20"></a> # DPD Retries : 3
<a name="ipsec.conf-21"></a> dpdtimeout=300s </pre><div class="gmail_extra">Running strongswan in a 18-70$ openwrt router is very usefull in many way<br></div></div>