| 1 |
On Monday 09 Sep 2013 11:12:47 thegeezer wrote: |
| 2 |
> asking the same question on the bird mailing list, was recommended some |
| 3 |
> values to make bird down the GRE tunnels faster. |
| 4 |
> multiple tunnels are required due to the very unreliable internet, so |
| 5 |
> one tunnel goes over one dsl link, another goes over another. |
| 6 |
> DPD timeouts are 30seconds minimum, which is too long. |
| 7 |
> i'll keep you posted if the bird recommendations works better |
| 8 |
|
| 9 |
You can tune dpd_delay and dpd_retry in racoon.conf (if you are using ipsec- |
| 10 |
tools) or the equivalent in open/strongswan. I think strongswan sends |
| 11 |
keepalives every 20 seconds or so and it can be increased if you prefer it so. |
| 12 |
|
| 13 |
-- |
| 14 |
Regards, |
| 15 |
Mick |
Archives