[strongSwan] dpd not getting triggered

Kalyani Garigipati (kagarigi) kagarigi at cisco.com
Thu Jan 11 19:47:12 CET 2018


Hi,

I am using strongswan version 5.6.1
I found that even though I configured dpd using dpddelay and dpdtimeout, dpd is not getting triggered from strongswan client at all even though there is no traffic passing.
Please let me know how to debug this.


config setup
         charondebug=all
        # crlcheckinterval=600
        # strictcrlpolicy=yes
        # cachecrls=yes
        # nat_traversal=yes
        # charonstart=no

conn %default
       ikelifetime=100m
       keylife=20m
       rekeymargin=8m
       keyingtries=1
       authby=psk
       keyexchange=ikev2
       ike=aes256-sha256-modp1024
       esp=3des-sha1
       mobike=yes
       dpddelay=5s
       dpdtimeout=150s

# Add connections here.

# Add connections here.
conn net-net
        left=10.127.47.104
        leftsubnet=10.127.47.104/32
        leftid=10.127.47.104
        right=10.104.108.110
        rightsubnet=10.104.108.110/32
        rightid=10.104.108.110
        auto=start

~
Regards,
kalyani



More information about the Users mailing list