[strongSwan] dpd not getting triggered

[bls s]

By default dpdaction=none, which disables sending dpd messages.



From: Kalyani Garigipati (kagarigi)<mailto:kagarigi at cisco.com>
Sent: Thursday, January 11, 2018 10:47 AM
To: users at lists.strongswan.org<mailto:users at lists.strongswan.org>
Subject: [strongSwan] dpd not getting triggered



Hi,

I am using strongswan version 5.6.1
I found that even though I configured dpd using dpddelay and dpdtimeout, dpd is not getting triggered from strongswan client at all even though there is no traffic passing.
Please let me know how to debug this.


config setup
         charondebug=all
        # crlcheckinterval=600
        # strictcrlpolicy=yes
        # cachecrls=yes
        # nat_traversal=yes
        # charonstart=no

conn %default
       ikelifetime=100m
       keylife=20m
       rekeymargin=8m
       keyingtries=1
       authby=psk
       keyexchange=ikev2
       ike=aes256-sha256-modp1024
       esp=3des-sha1
       mobike=yes
       dpddelay=5s
       dpdtimeout=150s

# Add connections here.

# Add connections here.
conn net-net
        left=10.127.47.104
        leftsubnet=10.127.47.104/32
        leftid=10.127.47.104
        right=10.104.108.110
        rightsubnet=10.104.108.110/32
        rightid=10.104.108.110
        auto=start

~
Regards,
kalyani

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180112/0ccc32dc/attachment-0001.html>