Comments on: A Virtual Visit from Paul Wouters http://nerdboys.com/2007/03/08/a-virtual-visit-from-paul-wouters/ Tech tips, news and reviews Mon, 30 Aug 2010 00:23:58 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: Joe http://nerdboys.com/2007/03/08/a-virtual-visit-from-paul-wouters/comment-page-1/#comment-101 Joe Thu, 08 Mar 2007 19:17:00 +0000 http://jojosoho.com/?p=31#comment-101 Thanks again Paul! I assumed I had the latest version of the man page because I installed the latest (stable?) version of the Debian package with apt-get. It is version 2.2.0-8. Thanks again Paul! I assumed I had the latest version of the man page because I installed the latest (stable?) version of the Debian package with apt-get. It is version 2.2.0-8.

]]> By: Paul Wouters http://nerdboys.com/2007/03/08/a-virtual-visit-from-paul-wouters/comment-page-1/#comment-100 Paul Wouters Thu, 08 Mar 2007 19:09:00 +0000 http://jojosoho.com/?p=31#comment-100 dpdaction=restart is not undocumented. You are just reading an old version of the man page. My version has:<br/><br/> dpdaction<br/> When a DPD enabled peer is declared dead, what action should be<br/> taken. hold (default) means the eroute will be put into %hold<br/> status, while clear means the eroute and SA with both be<br/> cleared. dpdaction=clear is really only usefull on the server of<br/> a Road Warrior config. The action restart is used on tunnels<br/> that need to be permanently up, and have static IP addresses.<br/><br/><br/><br/>Also note that in openswan 2.4.8 there is a fix for dpdaction=restart. And AFAIK, openwrt hasnt put in 2.4.8 yet.<br/>So restart might not always work on openwrt. dpdaction=restart is not undocumented. You are just reading an old version of the man page. My version has:

dpdaction
When a DPD enabled peer is declared dead, what action should be
taken. hold (default) means the eroute will be put into %hold
status, while clear means the eroute and SA with both be
cleared. dpdaction=clear is really only usefull on the server of
a Road Warrior config. The action restart is used on tunnels
that need to be permanently up, and have static IP addresses.

Also note that in openswan 2.4.8 there is a fix for dpdaction=restart. And AFAIK, openwrt hasnt put in 2.4.8 yet.
So restart might not always work on openwrt.

]]>