NETGEAR ProSafe FVS336Gv2 Reference Manual page 417

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
8. To change an IKE policy for IPv6 instead of IPv4, in the upper right, select the IPv6 radio
button.
The IKE Policies screen for IPv6 displays.
9. In the List of IKE Policies table, click the Edit button for the IKE policy that you want to
change.
The Edit IKE Policy screen displays. The following figure shows only the IKE SA
Parameters section. The Edit IKE Policy for IP4 and the Edit IKE Policy for IPv6 are
identical.
10. In the IKE SA Parameters section, locate the Dead Peer Detection fields and enter the
settings as described the following table.
Setting
Enable Dead Peer
Detection
Detection Period
Reconnect after failure
count
11. Click the Apply button.
Your settings are saved.
12. If you disabled the VPN policy with which the IKE policy for which you configured Dead Peer
Detection is associated, reenable the VPN policy:
a. Select VPN > IPSec VPN > VPN Policies.
The VPN Policies screen displays the IPv4 settings.
b. To reenable a VPN policy for IPv6 instead of IPv4, in the upper right, select the IPv6
radio button.
Set Up Virtual Private Networking With IPSec Connections
Description
To enable Dead Peer Detection, select the Yes radio button.
If the VPN firewall detects an IKE connection failure, it removes the IPSec and
IKE SA and forces a reestablishment of the connection. You must specify the
detection period in the Detection Period field and the maximum number of
times that the VPN firewall attempts to reconnect in the Reconnect after failure
count field.
The period in seconds between consecutive DPD R-U-THERE messages, which
are sent only when the IPSec traffic is idle. The default setting is 10 seconds.
The maximum number of DPD failures before the VPN firewall tears down the
connection and then attempts to reconnect to the peer. The default setting is
3 failures.
415