Netgear SRX5308 SRX5308 Reference Manual - Page 200
Table 5-21. Dead Peer Detection Settings, In the IKE SA Parameters of the screen
UPC - 606449065145
View all Netgear SRX5308 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 200 highlights
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual Figure 5-32 3. In the IKE SA Parameters section of the screen, locate the DPD fields, and complete the fields as explained Table 5-21. Table 5-21. Dead Peer Detection Settings Item IKE SA Parameters Enable Dead Peer Detection Description (or Subfield and Description) Select the Yes radio button to enable DPD. When the VPN firewall detects an IKE connection failure, it deletes the IPsec and IKE SA and forces a reestablishment of the connection. You must specify the detection period in the Detection Period field and the maximum number of times that the VPN firewall attempts to reconnect in the Reconnect after failure count field. Detection Period The period in seconds between consecutive "DPD R-U-THERE" messages, which are sent only when the IPsec traffic is idle. The default setting is 10 seconds. Reconnect after The maximum number of DPD failures before the VPN failure count firewall tears down the connection and then attempts to reconnect to the peer. The default is 3 failures. 4. Click Apply to save your settings. 5-58 Virtual Private Networking Using IPsec Connections v1.0, April 2010