Keep Alive; Nailed Up - Nortel BSR252 Configuration - Basics

212 Chapter 13 VPN
Table 47 Summary
Label
Edit
Delete

Keep Alive

When you initiate an IPSec tunnel with keep alive enabled, the Business Secure
Router automatically renegotiates the tunnel when the IPSec SA lifetime period
expires (see
more information about the IPSec SA lifetime). The keep alive option is available
with the Contivity Client rule. See the VPN Contivity Client Rule Setup screen
(Figure 69 on page
connection after you initiate it. Both IPSec routers must have a Business Secure
Router compatible keep alive feature enabled in order for this feature to work.
If the Business Secure Router has its maximum number of simultaneous IPSec
tunnels connected to it and they all have keep alive enabled, then no other tunnels
can take a turn connecting to the Business Secure Router because the Business
Secure Router does not drop the tunnels that are already connected (unless there is
outbound traffic with no inbound traffic).

Nailed up

The nailed up feature is similar to the keep alive feature. When you initiate an
IPSec tunnel with nailed up enabled, the Business Secure Router automatically
renegotiates the tunnel when the IPSec SA lifetime period expires (see
"Configuring advanced Branch office setup" on page 241
about the IPSec SA lifetime). The nailed up option is available with the branch
NN47923-500
Description
Click the radio button next to a VPN index number and then click Edit to
edit a specific VPN policy.
Click the radio button next to a VPN policy number you want to delete
and then click Delete. When a VPN policy is deleted, subsequent
policies do not move up in the page list.
"Configuring advanced Branch office setup" on page 241
215). In effect, the IPSec tunnel becomes an always on
Note: No matter whether or not keep alive is set, when there is
outbound traffic with no inbound traffic, the Business Secure Router
automatically drops the tunnel after two minutes.
section for
for more information