[strongSwan] Dead Peer Detection - Strongswan Android Clients

[Hay, Ben (TS Consulting)]

Hi

I currently have a Strongswan server implementation with Android clients. I can connect fine with no issues, however after a period of time the connection is no longer valid and cant access network resources behind the VPN server. This is not shown on the client side - which shows the connection as up with the key symbol in the android taskbar and the connected sign in the app itself.

After a period of time the server loses connection with the Android device. The server shows that the device is no longer connected however the client continues to show a good connection (but obviously no access to any resources  behind the VPN.)

I have been told this could be due to either rekeying parameters or the inclusion of dead peer detection. I would like to be reconnect in the background without any  user interference needed. Can anyone describe the config to allow this to happen. Below is my current config:

[cid:image001.png at 01CF9777.D3B12CA0]
[cid:image002.png at 01CF9777.D3B12CA0]

Thanks in advance, any help would be much appreciated.

Regards

Ben Hay
Technology Consultant

Technology Services (TS)

ben.hay at hp.com<mailto:ben.hay at hp.com>
T +447833048826
Hewlett-Packard Ltd
Amen Corner
Cain Road
Bracknell, Berkshire, RG12 1HN
England

Planned Holiday / Training

28th July 2014 - 1st August 2014
22nd December 2014 - 2nd January 2015

[HP]<http://www.hp.com/>

Please print thoughtfully

--------------------------------------------------------------------------------
Hewlett-Packard Limited registered Office: Cain Road, Bracknell, Berks RG12 1HN
Registered No: 690597 England

The contents of this message and any attachments to it are confidential and may be legally privileged. If you have received this message in error, you should delete it from your system immediately and advise the sender.

To any recipient of this message within HP, unless otherwise stated you should consider this message and attachments as "HP CONFIDENTIAL".
--------------------------------------------------------------------------------


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140704/2f64d511/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6807 bytes
Desc: image001.png
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140704/2f64d511/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 7187 bytes
Desc: image002.png
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140704/2f64d511/attachment-0003.png>