next »

[mephisto]

Hi there,

I have a WAN link that once in a while is dropping and the ipsec tunnels drops too, but then I need to manually click on the play button on ipsec status to establish it again.

Is there an option to select to re establish the connection when dropped?

Thanks!

[mephisto]

I think this is the option for this

Dead Peer Detection    Enable DPD

 seconds
Delay between requesting peer acknowledgement.

 retries
Number of consecutive failures allowed before disconnect.

I'm testing it at the moment, but I would like to ensure for example if I reboot the firewall the tunnels will be re established automatically as well

[mephisto]

Well that was the option that I was also looking for that we can find on watchguard firewalls:

Send IKE Keep Alive Messages
Keep alive interval    seconds


 Enable Dead Peer Detection
Maximum DPD attempts   
DPD Timeout   

Do we have this IKE keep alive messages on pfsense?