On Monday 09 Sep 2013 11:12:47 thegeezer wrote: > asking the same question on the bird mailing list, was recommended some > values to make bird down the GRE tunnels faster. > multiple tunnels are required due to the very unreliable internet, so > one tunnel goes over one dsl link, another goes over another. > DPD timeouts are 30seconds minimum, which is too long. > i'll keep you posted if the bird recommendations works better
You can tune dpd_delay and dpd_retry in racoon.conf (if you are using ipsec- tools) or the equivalent in open/strongswan. I think strongswan sends keepalives every 20 seconds or so and it can be increased if you prefer it so. -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
