[Swan] IKEv1 and a lost UDP packet

[Paul Wouters]

On Sun, 20 Oct 2013, Kevin Wilson wrote:

> Does it mean that after 3 trials the session it terminated in case not
> getting response ?
> (to be more specific: first trying after 20, then second again at 20,
> and third at 40 seconds, and not receiving a response will entail
> session termination ?

The default is to try forever at 40second. See 'man ipsec.conf' and the
keyingtries= parameter to modify the default behaviour.

Paul