Re: Dormant Mode?

>> It won't solve the problem of dormant mode hosts, though. If the 
>> keepalive originates at the VPN gateway, it will wake the host up. It has 
>> to somehow originate on the host side.
>
> Ah, but surely any improvement in the keepalive processing should ensure
> that both peers employ the same timeouts.
>

Right. If they both sync with the NAT timeout, then it doesn't matter. I 
guess the real problem is that the host can't influence the NAT timeout. If 
it's set too short, then the host will have to wake up - or get woken up - 
to keep the NAT and SA state hot. Sigh.

I suppose at this point one must throw up one's hands and say "its up to the 
network operator to configure their NAT timeouts so that dormant mode hosts 
don't need to wake up excessively".

            jak