From ad9d7d6ddbe0505a27cf81ffd3eeffd37132fae1 Mon Sep 17 00:00:00 2001 From: Jack Ivanov Date: Mon, 26 Sep 2016 22:07:34 +0300 Subject: [PATCH] disable dpdtimeout #90 --- roles/vpn/templates/ipsec.conf.j2 | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/roles/vpn/templates/ipsec.conf.j2 b/roles/vpn/templates/ipsec.conf.j2 index e0bec01..b1dde99 100644 --- a/roles/vpn/templates/ipsec.conf.j2 +++ b/roles/vpn/templates/ipsec.conf.j2 @@ -5,14 +5,13 @@ config setup conn %default dpdaction=clear dpddelay=35s - dpdtimeout=300s rekey=no keyexchange=ikev2 ike=aes128gcm16-sha2_256-prfsha256-ecp256! esp=aes128gcm16-sha2_256-ecp256! compress=yes fragmentation=yes - + left=%any leftauth=pubkey leftid={{ IP_subject_alt_name }} @@ -26,9 +25,8 @@ conn %default {% if service_dns is defined and service_dns == "Y" %} rightdns={{ local_service_ip }} {% else %} - rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %} -{% endif %} - + rightdns={% for host in dns_servers %}{{ host }}{% if not loop.last %},{% endif %}{% endfor %} +{% endif %} conn ikev2-pubkey - auto=add + auto=add