-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 31/07/15 15:57, Noel Kuntze wrote:
>
> Hello Tom,
>
> Use auto=route and dpdaction=clear between sites with static IPs.
> For connection between sites with mixed static and dynamic IPs, use
> auto=add and dpdaction=clear on the side with the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hello Tom,
Use auto=route and dpdaction=clear between sites with static IPs.
For connection between sites with mixed static and dynamic IPs,
use auto=add and dpdaction=clear on the side with the static IP
and auto=route and dpdaction=restart, or
Thank you, Noel. I will move forward with those recommendations and work to get
the IPFire (the distribution we use) WUI updated to allow the auto= changes.
Tom
On Jul 31, 2015, at 9:57 AM, Noel Kuntze n...@familie-kuntze.de wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hello
We have a number of sites connected via StrongSwan IKEv2 tunnels, and I
was hoping that someone might provide me with the recommended settings
for dpdaction and auto, given our setup. I think have a reasonable
handle on this, but I wanted to ask in case I was doing anything that
might result