[vpn-help] DPD parameters

[Matthew Grooms]

On 2/18/2011 10:20 AM, Da Da wrote:
> Hi,
>
> First of all, thank you for this great piece of software. I'm currently
> testing the VPN client on Windows x64 with a WWAN access. I've been
> testing the version 2.2b1 but I rolled back to v2.1.7 due to stability
> issues of the IKED service (I can't reproduce these issues yet).
> So I'm back in v2.1.7 and it works fine except one thing : the DPD
> feature disconnects the client very quickly if a gateway isn't reachable
> (about 10 seconds). As I create the VPN tunnel over a native mobile
> broadband connection, it's too short. Sometimes, I'm in the train or
> moving and the WWAN connection is lost for a few seconds, and Windows
> recovers it without problem. But Shrewsoft VPN already disconnected the
> tunnel...
> If I disable the DPD feature, it works. When the WWAN connection goes up
> again, the SA is maintained and I received packets again. However, this
> create session timeout issues on the facing gateway.
> A nice solution would be to increase the number of DPD retries, for it
> to be less aggressive. Is there a way to do it easily ?
>

Not at present. We may add a tunable for this in the future.

-Matthew