No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


What is the IKE DPD?

Publication Date:  2012-07-25 Views:  151 Downloads:  0

Issue Description

Q: What is the IKE DPD?

Alarm Information


Handling Process

A: The DPD is to test the keepalive status of the IKE SA of the IPSec peer, synchronously updating the IKE SA at the local end. The PDP consists of two parameters, namely, idle timer and timeout timer. The idle timer determines whether to send the DPD packet. If the idle timer does not receive encapsulated packets during the timing process, the DPD verification is performed; otherwise, the idle timer is reset. The timeout timer determines whether to perform the DPD verification again. If no DPD reply is received after three consecutive requests (request > timeout > request > timeout > request > timeout), the SA is deleted. To continue sending encrypted data packets, the SA is re-negotiated.

Root Cause