[strongSwan] Auto Reconnect / NET-NET PSK

Noel Kuntze noel at familie-kuntze.de
Thu Dec 4 19:10:09 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Matthew,

The timeout is set with "dpdtimeout" (default is 150 seconds).
The time after dpd packets are sent is adjusted with "dpddelay" (default is 30 seconds) .

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 04.12.2014 um 19:08 schrieb Matthew Ferry [PITSDC]:
> I added this to the moon config.
>
> What is the timeout period?
>
> On 12/4/2014 12:50 PM, Noel Kuntze wrote:
> Hi Matt,
>
> Use this
>
> auto=route # brings up the tunnel as soon as traffic destinated to the remote subnet is detected.
> dpdaction=restart # restarts the tunnel if it failed due to timeouts
>
> Mit freundlichen Grüßen/Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
> Am 04.12.2014 um 18:38 schrieb Matthew Ferry [PITSDC]:
> >>> Folks,
> >>>
> >>> I have a 'net to net' tunnel using PSK.
> >>>
> >>> If some happens on the MOON side and the connection goes down ---
> >>> Is there something I can add to the config to detect the down tunnel and bring it back up?
> >>>
> >>>
> >>> Matt
> >>> _______________________________________________
> >>> Users mailing list
> >>> Users at lists.strongswan.org
> >>> https://lists.strongswan.org/mailman/listinfo/users
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.strongswan.org
>> https://lists.strongswan.org/mailman/listinfo/users
>
> --
> Thanks and Regards,
>
> Matthew R. Ferry
> General Manager
>
>
>
> One Oxford Centre
> 301 Grant Street, Suite 4300
> Pittsburgh, Pennsylvania 15219
> United States
>
> Toll Free: 855-4-PITSDC
> Local Fax: 412-368-9021
>
> Departments: Development <http://development.pitsdc.com> | IT Services <http://itservices.pitsdc.com> | Hosting <http://hosting.pitsdc.com>
>
> Follow Us: Twitter @PITSDC <www.twitter.com/pitsdc> | Facebook /PITSDC <www.facebook.com/pitsdc>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJUgKN9AAoJEDg5KY9j7GZY7z4P/22nRNoQqu5DqiKG+EVmF64L
wPI6HxYgBN7ARALlbjYz2zVEHslZUCrgbNG4eCIZ3CZY73dTZ7QbSejL3ELapLkn
LUzpJoZAiaioq6wUVLEd/cMIpo6OWl4uNnRZvRsDXmPrMJIuBJ4yF/0KUGD/kfSB
BcxUsBA3tvPgdBvXk1ojdbM3vxgIYU18leV2iauoWnLDK6Q6wfBRnDI5QrgYLaeR
RLFLbCY9eJEesXHd0JJ4j3GCsoX9cmGbFTuBRuGzgSGiEaYMLNMnoNPHc5lywPRk
sU5900DKlG+rknLeeRLibcYtxB5KhSmbzYJ9kx8BAVHEYaMOxXFJLJsGZH5qQBwJ
teLV8roPhtZT7R2P6Zkj5CvbcXXHkZwUX6V4z7PCRq8a4KTvXAIaJKlSt7jATq6i
mUcmkL/ERuH3/UzSyqSavIwOn/EuRu9VHTZBaLnwLql1/Ah1fkT1XMZ96Co+JZa1
TA0H1KZy/LTHffYQboiFOipGXHHAsiFd5nx8MmGDR0s2p46UnSDLuyj0oc/+SNxu
dnCqbhf1M7UzckvjhskqNewfS6VrPirmx3K0i5vH87FH9INgIDP3r9WCXow1bBOA
KDWou9E0xgaz4vMQcrqJEQ//OD4Zl0W3Khr4IgPWAsAVYIclhQhJH1gkojIFviSU
ch5paPM0Oq9P5d2O9mdM
=2n43
-----END PGP SIGNATURE-----



More information about the Users mailing list