Re: Dormant Mode?

James Kempf wrote:

>
> This sounds like an acceptable way to estimate the NAT timeout, but I 
> think it should probably be incorporated into STUN or something like 
> that. 

Probably.

> It would be far better if the host could just ask the NAT what its 
> timeout is, but we're not there yet.

Yes.

> It won't solve the problem of dormant mode hosts, though. If the 
> keepalive originates at the VPN gateway, it will wake the host up. It 
> has to somehow originate on the host side.

Ah, but surely any improvement in the keepalive processing should ensure
that both peers employ the same timeouts.

--Jari