By default dpdaction=none, which disables sending dpd messages.


From: Kalyani Garigipati (kagarigi)<mailto:[email protected]>
Sent: Thursday, January 11, 2018 10:47 AM
To: [email protected]<mailto:[email protected]>
Subject: [strongSwan] dpd not getting triggered



Hi,

I am using strongswan version 5.6.1
I found that even though I configured dpd using dpddelay and dpdtimeout, dpd is 
not getting triggered from strongswan client at all even though there is no 
traffic passing.
Please let me know how to debug this.


config setup
         charondebug=all
        # crlcheckinterval=600
        # strictcrlpolicy=yes
        # cachecrls=yes
        # nat_traversal=yes
        # charonstart=no

conn %default
       ikelifetime=100m
       keylife=20m
       rekeymargin=8m
       keyingtries=1
       authby=psk
       keyexchange=ikev2
       ike=aes256-sha256-modp1024
       esp=3des-sha1
       mobike=yes
       dpddelay=5s
       dpdtimeout=150s

# Add connections here.

# Add connections here.
conn net-net
        left=10.127.47.104
        leftsubnet=10.127.47.104/32
        leftid=10.127.47.104
        right=10.104.108.110
        rightsubnet=10.104.108.110/32
        rightid=10.104.108.110
        auto=start

~
Regards,
kalyani

Reply via email to