Re: IPSec and dead peer detection not working

Lee Sharp <[email protected]> Wed, 27 Aug 2014 17:29:33 -0500
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
On 08/27/2014 04:23 PM, Magnus Hagdorn wrote:
> Hi there,
> I have a IPSec VPN between two n0n0walls, one has a static IP address
> the other has a dynamic IP address which changes daily. I use a dynamic
> DNS provider to track the changing IP number. This works. For the VPN I
> use the domain name as identifier. Every night when the IP address
> changes the VPN connection is interrupted and does not come back. I have
> to manually restart the VPN on the machine with the static interface and
> it works. I am using m0n0wall v 1.34a.

You need to look for Dead Pear Detection and the timeout.  That should 
speed the reconnect back up.

			Lee