Table of Contents
Advertisement
Chapter 6
Advanced Features
Dead Peer Detection
DPD Idle Period
DPD number of
Transmits
DPD Timeout
Tunnel inactivity timeout
202
The SpeedTouch™ supports the Dead Peer Detection protocol.
By default, the use of this protocol is enabled. This option allows disabling the use
of the DPD protocol.
DPD
The DPD protocol defines a worry period. This is an idle time during which no IPSec
traffic is detected from the remote peer. At the expiry of this period the local peer
transmits a number of R-U-THERE messages to detect the liveliness of the remote
peer.
This option sets the duration of the idle period, expressed in seconds.
dpd_idle_period
This option determines the number of R-U-THERE transmitted by the local peer. If
none of these messages is acknowledged in due time by the remote peer, it is
decided that the remote peer is dead.
dpd_xmits
This option determines the timeout value for the R-U-THERE messages. Within this
period an R-U-THERE acknowledge message from the remote peer is expected.
dpd_timeout
When no traffic is detected at the peer for a certain period, it is decided that the
tunnel is not used any more, and the IKE session is terminated. All IPSec
connections supported by the IKE session are terminated as well.
This option sets the value of the inactivity timer.
inactivity
Possible values
enabled
disabled
Unit
seconds
default value
3
Unit
seconds
Unit
seconds
default value
enabled
default value
180
default value
120
default value
3600
E-DOC-CTC-20051017-0169 v0.1
Advertisement
Table of Contents
