[c-nsp] IPSec peers not responding - advice

[Justin M. Streiner]

On Tue, 18 Apr 2006, Peter Hicks wrote:

> Justin M. Streiner wrote:
>
>>  We normally configure remote VPN tunnels to have the remote side try to
>>  initiate the connection.  The routers at the remote sites are normally not
>>  under our control, so this made the most sense to us.  As for people
>>  powering off routers at the end of the day, if they're under your control,
>>  the easiest fix may be a big red sticker that reads "DO NOT TURN OFF" or
>>  something similar :-)
>
> Do you have a configuration snippet on how to do this?  I'm guessing that I 
> need to turn something off on the hub router, but I'm not entirely sure.

I'll try to put something together tomorrow.  This was something we did at 
a place I used to work, so I need to take some time to shake the cobwebs 
out of my head :-)

> The remote routers are all in our users' homes - some people are convinced a 
> SOHO97 will catch fire if they leave it switched on when they're not using 
> it!

Nod....  been down this road with a few users in the past with similar 
setups.

jms