Re: [strongSwan] Recommendations for dpdaction= and auto=

2015-09-11 Thread Daniel Pocock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 31/07/15 15:57, Noel Kuntze wrote: > > Hello Tom, > > Use auto=route and dpdaction=clear between sites with static IPs. > For connection between sites with mixed static and dynamic IPs, use > auto=add and dpdaction=clear on the side with the

Re: [strongSwan] Recommendations for dpdaction= and auto=

2015-07-31 Thread Noel Kuntze
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello Tom, Use auto=route and dpdaction=clear between sites with static IPs. For connection between sites with mixed static and dynamic IPs, use auto=add and dpdaction=clear on the side with the static IP and auto=route and dpdaction=restart, or

Re: [strongSwan] Recommendations for dpdaction= and auto=

2015-07-31 Thread Tom Rymes
Thank you, Noel. I will move forward with those recommendations and work to get the IPFire (the distribution we use) WUI updated to allow the auto= changes. Tom On Jul 31, 2015, at 9:57 AM, Noel Kuntze n...@familie-kuntze.de wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hello

[strongSwan] Recommendations for dpdaction= and auto=

2015-07-30 Thread Tom Rymes
We have a number of sites connected via StrongSwan IKEv2 tunnels, and I was hoping that someone might provide me with the recommended settings for dpdaction and auto, given our setup. I think have a reasonable handle on this, but I wanted to ask in case I was doing anything that might result