Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Set Fortinet DPD interval from server's config
The name of the tag implies that its purpose is DTLS-specific (<dtls-config heartbeat-interval="X">) and that it requires the use of the DTLS heartbeat extension (https://tools.ietf.org/html/rfc6520). However, PPP already contains natural analogues for keepalive (Discard-Request) and DPD (Echo-Request and Echo-Reply), which appear to work just fine with Fortinet servers. We may as well use the server's heartbeat/keepalive interval for a more generic, transport-agnostic DPD mechanism, since OpenConnect and PPP already support it. The official Fortinet client software for Windows/Mac appears to be very deficient at dead peer detection, so this may represent a substantial improvement in functionality for some users. Signed-off-by: Daniel Lenski <dlenski@gmail.com>
- Loading branch information