Re: [Devil-Linux-discuss] Keeping IPSEC alive?

[Heiko Z. <he...@zu...>]

On Wed, August 24, 2005 22:38, P wrote:
> Fortunately connections have been really stable lately but I'm still
> curious about what people do to deal with the fact that ipsec completely
> craps out if a cable or dsl connection goes down for too long?
>
> Heiko mentioned adding to ipsec start to the if-up script BUT from what I
>  can see the interface doesn't really go down so it won't get called lol.
>
>
> Would a cron'd ping to a tunneled host with a restart ipsec (and ignore
> the iosocket failed on detach error) be the best way to accomplish not
> having to manually bring up ipsec again? I wander how cheapo hardware
> routers based on linux do this.

I think there's a ipsec command to see the status of the tunnel(s).
Maybe you should run this every couple minutes and then execute some
actions if necessary.
-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org