Re: isakmpd again: Renegotiate-on-HUP requires PPID?

[Toni Mueller <openbsd-misc@oeko.net>]

Hi,

On Fri, 30.07.2004 at 13:44:55 -0700, RZR <proc@stargazer.2y.net> wrote:
> Marc Wirth wrote:
> >    Renogiate-on-HUP=    true
> >in isakmpd.conf and added
> >     ! sh -c "/bin/kill -HUP `cat /var/run/isakmpd.pid`"
> >to my /etc/ppp/ppp.linkup script.

;-)

> echo "R" > /var/run/isakmpd.fifo

This is much easier... but:

I'm still wondering why two ISAKMPDs (both on 3.5) sometimes take a
very long time (> 1h) to renegotiate the connection, despite having
this in /etc/isakmpd/isakmpd.conf:

 Check-Interval=         60
 Retransmits=            8
 Exchange-max-time=      150
 Renegotiate-on-HUP=     1


When telling it to manually re-negotiate, the link comes up
immediately. I've got this problem on one box out of two with identical
configurations except for ip numbers and passwords.


Best,
--Toni++