[Swan] IKEv2 connection from Android drops after a few minutes

[Paul Wouters]

On Wed, 11 Mar 2020, Beat Zahnd wrote:

> I run 3.27 which is last version on stable Debian.

Grab the 3.31 source and run "make deb" ?

> Are the NAT-T keepalives fully independent from the DPD keepalives?

Yes. There are completely unrelated. DPDs only happen when there is no
IPsec traffic. NAT keepalives always happen (Its cheaper to fire them
then to ask the kernel every 20s if there was traffic)

Paul