Re: IPSec and dead peer detection not working
Lee Sharp <[email protected]> Thu, 28 Aug 2014 08:56:04 -0500
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
On 08/28/2014 02:16 AM, Magnus Hagdorn wrote: > On Wed, 2014-08-27 at 17:29 -0500, Lee Sharp wrote: >> You need to look for Dead Pear Detection and the timeout. That >> should >> speed the reconnect back up. >> > > I should have mentioned but the DPD timeout is set to 30sec on both > firewalls. I will need to collect the logs on another machine to see > what is happening... Is it set at both ends? Sometimes the IP will change, but the firewall will still try and keep the tunnel up because the other end did no change... Lee