No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

FAQ-How do I set the DPD time if a large amount of service traffic is transmitted through an IPSec tunnel?

Publication Date:  2019-01-24 Views:  51 Downloads:  0
Issue Description
How do I set the DPD time if a large amount of service traffic is transmitted through an IPSec tunnel?
Solution
If a large amount of service traffic is transmitted through an IPSec tunnel, the interval (set through the ike dpd interval check-interval command) for triggering DPD cannot be a too small value. Otherwise, tunnel re-negotiation occurs, causing service interruption.
You can also run the sa duration { traffic-based kilobytes | time-based seconds } command to set a comparatively long SA duration to ensure service continuity.

END