Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1 Manual page 439

Table 235: Gateway Configuration Details (continued)
Option Function
dynamic Specifies a dynamic IPsec for gateway.
gateway > Dead Peer Detection
Enable Feature Enables the dead peer detection (DPD)
feature.
Comment Supplies a descriptive comment for the DPD.
Always Send Specifies that the DPD messages are sent
periodically, regardless of the traffic.
Interval Specifies the time interval to send the DPD
messages.
Threshold Specifies the maximum number of DPD
transmissions.
gateway > Local Identity
Comment Supplies a descriptive comment for the
gateway local identity.
gateway > Local Identity > Inet
None Specifies that inet, hostname,
user-at-hostname, and distinguished-name
are not enabled.
Copyright © 2010, Juniper Networks, Inc.
Chapter 22: Configuring Security
Your Action
1. Select the option.
2. Select Dynamic and update the following:
Comment—Supplies a descriptive comment.
Connections limit—Specifies the maximum
number of users connected to the gateway.
Range: 0 - 4294967295.
—Specifies the IKE ID type.
Ike User Type
3. Select Dynamic > Distinguished Name and select
any of the following:
None—Specifies that neither distinguished name
nor hostname nor inet nor user-at-hostname is
specified.
distinguished-name—Specifies the distinguished
name for the gateway. Select the option and enter
the following:
Comment—Supplies a descriptive comment
for the distinguished name.
Container—Specifies the container text.
Wildcard—Specifies the wildcard text.
hostname—Specifies the hostname for the
gateway. Select the option and enter the
hostname.
Select the Enable Feature check box to enable this
feature.
(Optional) Enter a comment.
Select the Always Send check box to enable this
feature.
Set the time interval to send the DPD messages. Range:
10 - 60.
Set the threshold for DPD transmissions. Range: 1 - 5.
(Optional) Enter a comment.
Select the option.
403