IPSec DPD action not configurable (fixed setting is clear)

[jmalter]

In 19.1 also the IPSec DPD action is not configurable, which can resists in stalled IPSec tunnel.
We are using opnsense with about 16 IPsec Site-to-Site tunnel, but the dpdaction is a fixed setting to clear. That means if the tunnel fails, it will not be restarted. Why it is not possible to set this fixed to "restart" and or to set this via GUI?

Best regards

Joerg

[jmalter]

Hi there,

is there any chance, that we get a additionally checkbox in src/www/vpn_ipsec_phase1.php for dpd_mode?
Standard could be clear and selectable should be restart.

Best regards

Joerg

[franco]

https://github.com/opnsense/core/issues

[jmalter]

Thanks, will create an issue entry

[jeuler]

Thanks for this topic. I'm currently in the phase of implementing various OPNsense boxes instead of IPcop and have been wondering why it is mostly the OPNsense-OPNsense VPN tunnels which don't come up again  8)

[franco]

The thread is at https://github.com/opnsense/core/issues/3291


Cheers,
Franco