OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: jmalter on February 15, 2019, 08:57:47 am

Title: IPSec DPD action not configurable (fixed setting is clear)
Post by: jmalter on February 15, 2019, 08:57:47 am

In 19.1 also the IPSec DPD action is not configurable, which can resists in stalled IPSec tunnel.
We are using opnsense with about 16 IPsec Site-to-Site tunnel, but the dpdaction is a fixed setting to clear. That means if the tunnel fails, it will not be restarted. Why it is not possible to set this fixed to "restart" and or to set this via GUI?

Best regards

Joerg

Title: Re: IPSec DPD action not configurable (fixed setting is clear)
Post by: jmalter on March 06, 2019, 08:54:32 am

Hi there,

is there any chance, that we get a additionally checkbox in src/www/vpn_ipsec_phase1.php for dpd_mode?
Standard could be clear and selectable should be restart.

Best regards

Joerg

Title: Re: IPSec DPD action not configurable (fixed setting is clear)
Post by: franco on March 06, 2019, 12:19:29 pm

https://github.com/opnsense/core/issues

Title: Re: IPSec DPD action not configurable (fixed setting is clear)
Post by: jmalter on March 06, 2019, 12:20:39 pm

Thanks, will create an issue entry

Title: Re: IPSec DPD action not configurable (fixed setting is clear)
Post by: jeuler on March 11, 2019, 05:45:10 pm

Thanks for this topic. I'm currently in the phase of implementing various OPNsense boxes instead of IPcop and have been wondering why it is mostly the OPNsense-OPNsense VPN tunnels which don't come up again  8)

Title: Re: IPSec DPD action not configurable (fixed setting is clear)
Post by: franco on March 12, 2019, 12:14:55 pm

The thread is at https://github.com/opnsense/core/issues/3291


Cheers,
Franco