changed my mind about closeaction, we should maybe have that, but trying to use hold instead

2018-11-18 22:14:26 +01:00 · 2018-11-18 22:14:26 +01:00 · 9d11caf8f9
parent 86d5c80bbb
commit 9d11caf8f9
1 changed files with 2 additions and 1 deletions
--- a/files/ipsec.conf.wit
+++ b/files/ipsec.conf.wit
@ -1,5 +1,4 @@
 config setup
-    #uniqueids=yes
    #strictcrlpolicy=yes
    cachecrls=yes

@ -9,6 +8,8 @@ conn %default
    keyingtries=%forever
    dpdtimeout=9
    dpddelay=2
+    dpdaction=hold
+    #closeaction=none
    type=transport
    ike=aes256-sha512-modp4096,aes128-sha1-modp2048!
    esp=aes256-sha512-modp4096,aes128-sha1-modp2048!