From 1778cb1f45e31c803a0cf30edc76b55cb0c91e83 Mon Sep 17 00:00:00 2001
From: Dan Guido <dan@trailofbits.com>
Date: Tue, 18 Apr 2017 01:12:21 -0400
Subject: [PATCH] disable dpd #430 (#437)

Closes #430
---
 roles/vpn/templates/ipsec.conf.j2 | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/vpn/templates/ipsec.conf.j2 b/roles/vpn/templates/ipsec.conf.j2
index 03211b9..ec74480 100644
--- a/roles/vpn/templates/ipsec.conf.j2
+++ b/roles/vpn/templates/ipsec.conf.j2
@@ -1,11 +1,11 @@
 config setup
-    uniqueids = never # allow multiple connections per user
+    uniqueids = replace
     charondebug="ike 2, knl 2, cfg 2, net 2, esp 2, dmn 2,  mgr 2"
 
 conn %default
     fragmentation=yes
     rekey=no
-    dpdaction=clear
+    dpdaction=none
     keyexchange=ikev2
     compress=yes
     dpddelay=35s