Configure Dead Peer Detection - NETGEAR SRX5308 Reference Manual

Table 48. Keep-alive settings (continued)
Setting
Enable Keepalive
(continued)
4. Click Apply to save your settings.

Configure Dead Peer Detection

The Dead Peer Detection (DPD) feature maintains the IKE SA by exchanging periodic
messages with the remote VPN peer.

To configure DPD on a configured IKE policy:
1. Select VPN > IPSec VPN. The IPSec VPN submenu tabs display, with the IKE Policies
screen in view (see
2. In the List of IKE Policies table, click the Edit table button to the right of the IKE policy that
you want to edit. The Edit IKE Policy screen displays. (The following figure shows only the
IKE SA Parameters section of the screen.)
Figure 122.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Description
Detection Period
Reconnect after
failure count
Figure 104 on page 161).
Virtual Private Networking Using IPSec Connections
The period in seconds between the keep-alive requests.
The default setting is 10 seconds.
The maximum number of keep-alive requests before the
VPN firewall tears down the connection and then attempts
to reconnect to the remote endpoint. The default is 3
keep-alive requests.
195