QNO VPN QoS User Manual page 147

1x100mbps wan + 4x100mbps switch lan + 2xusb family &small business ipsec vpn solution
Table of Contents

Advertisement

Heart Beat:VPN Tunnel Heart Beat Detection function。
If this option is selected, the system will sent ICMP ACK packet to the remote host with VPN
tunnel regularly; the remote host will also send an ICMP ACK reply packet toward the originator.
If there is still no received ICMP ACK reply after exceeding the setting retry, the Heart Beat
originator will terminate this VPN tunnel.
Under this situation, if you are the VPN tunnel initiator, the system will try to reconnect the tunnel;
if you are the passive party, the system will wait for the initiator to establish the tunnel again.
Remote Host
Interval
Retry
The VPN Heart Beat detection and DPD features are both used to provide a stabile VPN solution
for customers. The difference between them is that we can use the Heart Beat detection in a non
IPSec protocol. With the Heart Beat detection, we can monitor the VPN tunnel and make sure
whether the tunnel exists and smooth or not. However, with the DPD feature, it is only available
under the IPSec protocol.
The remote end point for the Heart Beat Detection. It is always sensible
to select an end point for the Heart Beat detection; the end point should
be a strong and stable server which is able to send reply quickly. We
suggest using the LAN IP address of the VPN remote end point device
as the target of the Heart Beat detection.
The default time for the Heart Beat interval is 30 seconds. The system
will send back an ICMP echo request in every 30 seconds after the VPN
tunnel is established.
The default retry times are 5. The system will terminate the VPN tunnel if
the Heart Beat is still failure over the retry default.
146
V
P
N
Q
o
S
W
i
r
e
l
e
s
s
R
o
u
V
P
N
Q
o
S
W
i
r
e
l
e
s
s
R
o
u
t
e
r
t
e
r

Advertisement

Table of Contents
loading

Table of Contents