Re: VPN and dead peer detection

I can't say as I have any answers for you - only more questions.  I have a
similar situation in that I have a couple of 1.4.something setups.  One
with a static IP, the other a dynamic IP.  That tunnel goes down all the
time.  Sometimes it will come back up on its own, other times not so much.
I can't figure out any rhyme or reason for it.

I have also had a config with 4 different units, two on 1.4.somenum and two
on 2.2.somenum.  This had a mesh config where each node had connections to
the other 3.  All static IPs.  With all of those tunnels, if one of the
nodes went down, most of the time everything would just recover when it
came back up.  Sometimes (again - not sure why) one or two of the tunnels
would stay down and require a manual restart...

So - you're not alone in the VPN funk is my point...

Matt

On Thu, Aug 13, 2015 at 11:03 AM, Russell Meyer <rmeyer-pedKuh61NU8MLht0+yDdMwC/[email protected]>
wrote:

> Got a weird one...
>
> So I have one site that works PERFECT, tunnels stay up over the weekend,
> traffic flows without issue...if the tunnel goes idle/close, any traffic
> from either side brings it back up...
>
> The other site, well only traffic from one side (non IPCOP) can bring it
> back online...traffic from the IPCOP side wont bring it up...dead peer
> detection flagged as restart...and if I do generate traffic across and
> force the tunnel up, it only stays up for 5 min dispite having ike/ipsec
> set in the HOURS...
>
> Thoughts? I am reviewing both side configs currently
> [REVERSEVISION USER CONFERENCE]<http://www.reversevision.com/rv-user-con/>
>
> Confidentiality Notice: This communication may contain information that is
> proprietary, privileged or confidential, or otherwise legally exempt from
> disclosure. If you are not the named addressee, you are not authorized to
> read, print, retain, copy or disseminate any part of this message. If you
> have received this message in error, please notify the sender immediately
> by email and delete all copies of the message. ReverseVision, Inc.
> expressly disclaims that any legal, binding or valid contract was created
> or modified or exists as a result of the transmission of this e-mail.
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> IPCop-user mailing list
> [email protected]
> Manage your subscription or unsubscribe
> https://lists.sourceforge.net/lists/listinfo/ipcop-user
>
------------------------------------------------------------------------------
_______________________________________________
IPCop-user mailing list
[email protected]
Manage your subscription or unsubscribe
https://lists.sourceforge.net/lists/listinfo/ipcop-user