Any IP in the remote subnet range (remote internal IP that is inside the remote subnet tunnel definition). It doesn't even have to answer or exist. It's just to bring up the tunnel or keep it alive as there is traffic for the remote subnet.
Holger -----Original Message----- From: Vaughn L. Reid III [mailto:[EMAIL PROTECTED] Sent: Monday, March 26, 2007 1:53 PM To: support@pfsense.com Subject: [pfSense Support] IPSec Keep Alive Question I have a question about the IPSec keep-alive feature in pfsense. What is the preferred IP address to ping with this feature, the public IP of the remote tunnel end-point, or a host that is not the remote router on the private network side of the remote end-point, or the private IP address of the remote router? Thanks, Vaughn Reid III --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]