Hi Terry,

> My value was set at 500 as shown above, but I didn't see the first
> attempt to send an R-U-THERE query until over 15 minutes after I
> terminated all communications between the peers

If an ESP packet is received, the DPD delay timer is reset, as we know
the SA is still up. So a first R-U-THERE is not sent before 500s after
the last ESP/IKE packet from the peer has been seen.

Regards
Martin


_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to