RE: Controll/ Check VPN Tunnel?

["Stefan Drees" <s_drees@t-online.de>]

Thanks for your answer. I hope you can help me to find my mistake.
I have succesfully established a connection between a third part router
with static ip and an linux box with FreeS/WAN and dynamic ip (pppoe).
Here is my config:

conn %default
        keyingtries=3
        type=tunnel
        auth=esp
        esp=3des-sha1-69
        authby=secret
        ikelifetime=1h
        keylife=1h
        keyexchange=ike
        pfs=yes
        left=%defaultroute
        leftsubnet=192.168.10.0/24

conn tital
        right=<static ip>
        rightsubnet=192.168.50.0/24
        auto=start

I think it must be correct or i?m false?

How can/ does FreeS/WAN detect and reestablish a lost connection,
for example isp disconnects after 24h.

Can both sides establish the freeS/WAN tunnel only if needed
without problems (routing)?

Thanks again for you help.

> -----Ursprungliche Nachricht-----
> Von: Jamin W. Collins [mailto:jcollins@cerberus.intern.home.de]Im
> Auftrag von Jamin W. Collins
> Gesendet: Dienstag, 15. Juli 2003 22:12
> An: debian-user@lists.debian.org
> Betreff: Re: Controll/ Check VPN Tunnel?
> 
> 
> On Tue, Jul 15, 2003 at 10:01:02PM +0200, Stefan Drees wrote:
> 
> > i need to setup an VPN LAN to LAN connection between two Debian 3.0
> > Server.  On server with static ip and one with dynamic ip. I think i
> > have two options:
> > 1) Create an continuous VPN tunnel or
> > 2) Create an VPN tunnel only if needed.
> > 
> > Both options results in an problem for me. How can i automatic check
> > the tunnel and if the check failed reestablish the tunnel 
> (for example
> > ISP disconnect).
> 
> Take a look at FreeS/WAN it will do everything you want.
> 
> > And for option 2: How how can i prevent that both sides 
> establish the
> > tunnel so that i have two of them. I think routing could make a
> > problem :-).
> 
> See above.
> 
> > I have build already VPN tunnel using freeswan, so i?m running in
> > these problems.
> 
> If you're running into these problems with FreeS/WAN you have 
> something
> misconfigured.  I have several FreeS/WAN connections with no problems.
> 
> -- 
> Jamin W. Collins
> 
> Linux is not The Answer. Yes is the answer. Linux is The 
> Question. - Neo
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact 
> listmaster@lists.debian.org
> 
>