From b844d9b24face466ddb5340cb65acff202011c32 Mon Sep 17 00:00:00 2001 From: Seth Mos Date: Sat, 5 Apr 2008 22:20:32 +0000 Subject: [PATCH] Use DPD and frag support we already have --- etc/inc/vpn.inc | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 42e2db03a3..1c0a1213c6 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -388,6 +388,8 @@ remote {$tunnel['remote-gateway']} \{ {$certline} peers_identifier address {$tunnel['remote-gateway']}; initial_contact on; + dpd_delay 20; # DPD poll every 20 seconds + ike_frag on; support_proxy on; proposal_check obey; @@ -494,6 +496,8 @@ remote anonymous \{ {$nattline} {$certline} initial_contact on; + dpd_delay 20; # DPD poll every 20 seconds + ike_frag on; passive on; generate_policy on; support_proxy on;