diff --git a/files/ipsec.conf.wit b/files/ipsec.conf.wit
index 1de4e92..63cab8a 100644
--- a/files/ipsec.conf.wit
+++ b/files/ipsec.conf.wit
@@ -1,5 +1,4 @@
 config setup
-    #uniqueids=yes
     #strictcrlpolicy=yes
     cachecrls=yes
 
@@ -9,6 +8,8 @@ conn %default
     keyingtries=%forever
     dpdtimeout=9
     dpddelay=2
+    dpdaction=hold
+    #closeaction=none
     type=transport
     ike=aes256-sha512-modp4096,aes128-sha1-modp2048!
     esp=aes256-sha512-modp4096,aes128-sha1-modp2048!