From 6039959242dcc031d2fa80a03661c59c4d5c1cd3 Mon Sep 17 00:00:00 2001 From: Seth Mos Date: Sat, 5 Apr 2008 22:19:38 +0000 Subject: Use DPD and frag support we already have --- etc/inc/vpn.inc | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'etc/inc/vpn.inc') diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 25522c0..2381bea 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -420,6 +420,8 @@ remote {$tunnel['remote-gateway']} \{ {$certline} peers_identifier address {$rgip}; initial_contact on; + dpd_delay 20; # DPD poll every 20 seconds + ike_frag on; support_proxy on; proposal_check obey; @@ -530,6 +532,8 @@ remote anonymous \{ my_identifier {$myidentt} "{$myident}"; {$certline} initial_contact on; + dpd_delay 20; # DPD poll every 20 seconds + ike_frag on; passive on; generate_policy on; support_proxy on; -- cgit v1.1