I've been struggling with SA:s dying when the link is idling for a few
hours, and just noticed that racoon has had support for the "keepalive;"
keyword in racoon.conf for quite some time, although obviously undocumented.
I just added the keepalive; statement to racoon running on my freebsd
servers and it actually worked as expected. This feature is lacking in my
WinXP boxes though, so I'd be more than happy for a little checkbox in the
tunnel configuration that added "keepalive;" to racoon.conf. Or is there a
reason to why this isn't already there?

 

Cheers,

 

Thomas Hertz