Configuring Dead Peer Detection - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

Table 5-20. Keepalive Settings
Item
General
Enable Keepalive
5. Click Apply to save your settings.

Configuring Dead Peer Detection

The Dead Peer Detection (DPD) feature maintains the IKE SA by exchanging periodic messages
with the remote VPN peer. To configure DPD on a configured IKE policy:
1. Select VPN > IPSec VPN from the menu. The IPsec VPN submenu tabs display, with the IKE
Policies screen in view (see
2. In the List of IKE Policies table, click the Edit table button to the right of the IKE policy that
you want to edit. The Edit IKE Policy screen displays.
the IKE SA Parameters section of the screen).
Virtual Private Networking Using IPsec Connections
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Description (or Subfield and Description)
Select a radio button to specify if keepalive is enabled:
• Yes. This feature is enabled. Periodically, the VPN firewall sends keepalive
requests (ping packets) to the remote endpoint to keep the tunnel alive.
You must enter the ping IP address, detection period, and the maximum
number of keepalive requests that the VPN firewall sends (see below).
• No. This feature is disabled. This is the default setting.
Ping IP Address
Detection Period The period in seconds between the keepalive requests.
Reconnect after
failure count
Figure 5-20 on page
v1.0, April 2010
The IP address that the VPN firewall pings. The address
must be of a host that can respond to ICMP ping
requests.
The default setting is 10 seconds.
The maximum number of keepalive requests before the
VPN firewall tears down the connection and then
attempts to reconnect to the remote endpoint. The default
is 3 keepalive requests.
5-22).
(Figure 5-32 on page 5-58 shows only
5-57