[strongSwan] Usage questions: DPD and auto=

2015-03-09 Thread Tom Rymes
All, I have two questions: 1.) Since IKEv2 does not use DPD, should one omit the dpdaction directives from ipsec.conf for a connection using IKEv2? Is there any harm/unintended consequences if they are left in, and are there alternate directives that one should use instead? 2.) Is it

Re: [strongSwan] Usage questions: DPD and auto=

2015-03-09 Thread Martin Willi
Hi Tom, 1.) Since IKEv2 does not use DPD, should one omit the dpdaction directives from ipsec.conf for a connection using IKEv2? While IKEv2 does not use DPD, it provides a very similar mechanism called liveness checks. The dpdaction and dpddelay keywords work for both IKEv1 and IKEv2 in