Cradlepoint IBR600 User Manual page 42

User Manual / IBR600/IBR650
Add/Edit Tunnel – Dead Peer Detection
Dead Peer Detection (DPD) defines how the router
will detect when one end of the IPsec session loses
connection while a policy is in use.
Connection Idle Time: Configure how long the router
will allow an IPsec session to be idle before beginning
to send Dead Peer Detection (DPD) packets to the
peer machine. (Default: 30 seconds. Range: 10 – 3600
seconds.)
Request Frequency allows you to adjust the delay
between these DPD packets. (Default: 15 seconds.
Range: 2 – 30 seconds.)
Maximum Requests: Specify how many requests to
send at the selected time interval before the tunnel
is considered dead. (Default: 5. Range: 2 – 10.)
Failback Retry Period: If you have VPN tunnel failover/failback enabled (see below), set the time period
between each check on the primary network after failover. (Default: 10 seconds. Range: 5 – 60 seconds.)
Failover Tunnel and Failback Tunnel: Use these settings to create two tunnels – one as the primary tunnel and
one as the backup tunnel. To configure tunnel failover/failback, complete the following steps:
1. Create two tunnels: one for primary and one for backup. Make sure that both tunnels have the same
Remote Network and that both have Dead Peer Detection enabled.
2. Choose one to be the primary tunnel. Open the editor for this tunnel and make sure Tunnel Enabled is
selected. Then go to the Dead Peer Detection page. Under Failover Tunnel select the other tunnel you
have created.
3. Open the editor for the failover tunnel. Make sure Tunnel Enabled is not selected. On the Dead Peer
Detection page, set the Failback Tunnel to your primary tunnel.
Global VPN Settings
These settings apply to all configured VPN tunnels.
Enable VPN Service: Enabling VPN Service will allow you
to load a certificate for VPN to the router.
Certificate Name: Select the Certificate Name.
IKE / ISAKMP Port: Internet Key Exchange / Internet
Security Association and Key Management Protocol port.
(Default: 500. This is a standard VPN port that usually
does not need to be changed.)
IKE / ISAKMP NAT-T Port: Internet Key Exchange /
Internet Security Association and Key Management
Protocol network address translation traversal port.
(Default: 4500. This is a standard VPN NAT-T port that
usually does not need to be changed.)
NAT-T KeepAlive Interval: Number of seconds between sending NAT-T packets to keep the tunnel alive if no
other traffic is being sent. (Default: 20 seconds. Range: 0-3600 seconds. 20 seconds will be sufficient in almost
all cases.)
Tunnel Connect Retry: Number of seconds between connection attempts. (Default: 30 seconds. Range: 10-255
seconds. 30 seconds will be sufficient in almost all cases.)
©2015 Cradlepoint. All Rights Reserved.
11/5/15
| +1.855.813.3385 | cradlepoint.com
42