Here is my somewhat potential setup for why I needed to keep the tunnel up.
Lets say you have voip phones at a small remote site (1-2 users) which has a dynamic ip address. (Which uses the mobile ipsec client setup) Lets also assume the phones don't register with the call server (static configuration or they register every 30min/60min). Call server is at the host site. Call comes in for one of the remote phones but because the tunnel is down and the ip is dynamic it can't bring up ipsec session, hence unable to ring the phone. Now you might say if a user isn't there who cares. But the phone might be set to do call forwarding or the user doesn't have their machine on. On this note it could be resolved if it was possible to put in a dynamicdns name instead of ip so the host site would always be able to find the remote site? Thanks John -----Original Message----- From: Vivek Khera [mailto:[EMAIL PROTECTED] Sent: Friday, November 18, 2005 3:19 PM To: [email protected] Subject: Re: [pfSense Support] IPsec Does Auto Establish work? what's the point of keeping the tunnel up? won't either endpoint force it to re-establish on demand anyhow? i know my mobile user IPsec vpn does so from my mac to pfSense. i'm fairly certain our remote office VPN also does so, but it is a LOOOONG haul over an unreliable network, so it is up and down all the time anyway. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
