[strongSwan] question about DPD

Harald Dunkel harald.dunkel at aixigo.com
Tue Jun 8 09:56:28 CEST 2021


Hi folks,

question about DPD in a road-warrior configuration: Is it
sufficient for either side to answer DPD packets, or should
both sides run their own DPD in parallel, independent from
the DPD sent by their peer?

Reason for asking is, I have the impression that some home
office gateways keep track only of the outgoing traffic
(laptop to VPN gateway) to keep their stateful firewall
alive, ignoring incoming DPD traffic sent by the VPN gateway.


Every helpful comment is highly appreciated

Harri


More information about the Users mailing list