<tt><font size=2>> dpddelay=30<br>
> dpdtimeout=120<br>
> dpdaction=clear<br>
...</font></tt>
<br><tt><font size=2>> 000 #1262: "blackswan"[5] 86.181.114.105:4500
STATE_MAIN_R3 (sent MR3, <br>
> ISAKMP SA established); EVENT_SA_REPLACE in 630s; newest ISAKMP; <br>
> lastdpd=2640s(seq in:22161 out:0); idle; import:not set<br>
...</font></tt>
<br>
<br><tt><font size=2>this is something i've seen pretty often too. Shouldn't
this SA have been deleted a long time ago? with a dpd action (clear) being
long overdue? Because AFAIU this is what keeps the other gateway from initiating
a new one.</font></tt>
<br>
<br><tt><font size=2>My hardware gateways act this way, but libreswan does
not. And this mismatch in behaviour keeps connections in broken state for
quite some time if the SAs have long lifetimes.</font></tt>
<br>
<br><tt><font size=2>Best Regards</font></tt>
<br><tt><font size=2> Heiko</font></tt>