My suggestion for these situations is to use the shellcmd portions of
config.xml and launch the pings into the background.  Again, I don't
want to start editing crontab and inserting ping commands and have to
cleanup after you remove tunnels, etc.  Its a huge hack and its not
something I want to introduce before we release.    If we keep adding
these things that can easily be solved in other regards we will never
release!   We are already way behind schedule.

On 11/18/05, John Cianfarani <[EMAIL PROTECTED]> wrote:
> Here is my somewhat potential setup for why I needed to keep the tunnel
> up.
>
> Lets say you have voip phones at a small remote site (1-2 users) which
> has a dynamic ip address. (Which uses the mobile ipsec client setup)
> Lets also assume the phones don't register with the call server (static
> configuration or they register every 30min/60min).
>
> Call server is at the host site.  Call comes in for one of the remote
> phones but because the tunnel is down and the ip is dynamic it can't
> bring up ipsec session, hence unable to ring the phone.
>
> Now you might say if a user isn't there who cares.  But the phone might
> be set to do call forwarding or the user doesn't have their machine on.
>
>
> On this note it could be resolved if it was possible to put in a
> dynamicdns name instead of ip so the host site would always be able to
> find the remote site?
>
> Thanks
> John
>
> -----Original Message-----
> From: Vivek Khera [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 18, 2005 3:19 PM
> To: support@pfsense.com
> Subject: Re: [pfSense Support] IPsec Does Auto Establish work?
>
> what's the point of keeping the tunnel up?  won't either endpoint
> force it to re-establish on demand anyhow?
>
> i know my mobile user IPsec vpn does so from my mac to pfSense.  i'm
> fairly certain our remote office VPN also does so, but it is a
> LOOOONG haul over an unreliable network, so it is up and down all the
> time anyway.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to