> I have changed one side to 'add'. Did you also mean removing the > dpdaction? I would remove it on the side where you are using auto=add, yes. Otherwise you may run in the same troubles if DPD triggers. The other peer should recreate the tunnel after a network failure. Regards Martin