topic Re: How to configure Keepalive? in Firewall and Security Management

How to configure Keepalive?

Wang — Wed, 23 Oct 2019 05:24:59 GMT

Hello, engineers, how do you configure Keepalive on CheckPoint?Thank you for your support.

Re: How to configure Keepalive?

G_W_Albrecht — Wed, 23 Oct 2019 07:29:19 GMT

Which Keepalive?

Some examples:

1.	Last Updated: 30-Sep-2015 sk101449: Exclude networks from Identity Awareness Captive Portal's keepalive feature\| Portal's keepalive feature.... Portal's keepalive feature - $FWDIR/conf... Captive Portal's keepalive feature: Connect to command line on... regular Captive Portal and not with keepalive. Show... Product: Identity Awareness Version: R75, R76 and 3 more Platform: All
2.	Last Updated: 18-Mär-2017 sk41685: "IP Cluster: last keepalive scheduled ZZZ ms ago" in /var/log/messages file on IP appliances running IPSO OS \| : last keepalive scheduled ZZZ ms ago... Cluster: last keepalive scheduled 530 ms ago This message is... Product: Cluster - 3rd party Version: All Platform: IP Series
3.	Last Updated: 01-Mär-2019 sk145412: Cisco VoIP calls are dropped with "SIP Re-Invites exceeded the limit" reject reason \| If SIP INVITE is sent every 90 seconds as SIP keepalive, SIP... Product: Security Gateway Version: R77.30 OS: Gaia
4.	Last Updated: 03-Jun-2019 sk120534: CloudGuard for AWS - Transit VPC Architecture \| {TUN1-INSIDE-VIRTUAL-PRIVATE-GATEWAY} keepalive 10 (optional) set bgp external remote-as... {VIRTUAL-PRIVATE_GATEWAY-ASN} peer {TUN2-INSIDE-VIRTUAL-PRIVATE-GATEWAY} keepalive 10... Product: vSEC for AWS and 1 more Version: R80.10, R80.20 and 1 more OS: Gaia Platform: AWS
5.	Last Updated: 07-Nov-2015 sk108548: Details about BGP timers \| ; Keepalive Timers The hold and keepalive timers are configured on... ;peer address> keepalive <keepalive interval> During... used... The keepalive will then be automatically... Product: Security Gateway and 3 more Version: All OS: Gaia, SecurePlatform 2.6 Platform: All
6.	Last Updated: 13-Mai-2019 sk95967: BGP on Gaia OS \| ; set bgp external remote-as 65001 peer 10.10.60.11 keepalive 30... is waiting for a keepalive message. Established is... reached once a keepalive is received in the OpenConfirm state... Product: Security Gateway and 3 more Version: R75.40, R75.40VS and 11 more OS: Gaia Platform: All

Re: How to configure Keepalive?

Wang — Thu, 24 Oct 2019 01:08:43 GMT

Operating system is R80.10, how to configure keepalive when doing IPSec VPN?

Re: How to configure Keepalive?

PhoneBoy — Thu, 24 Oct 2019 02:15:56 GMT

I assume you're referring to Dead Peer Detection, which is needed when the other end isn't Check Point.
See: https://community.checkpoint.com/t5/General-Topics/Enable-DPD-on-R80-20/m-p/32605
Where both ends are Check Point, look up Permanent Tunnels in the Docs: https://sc1.checkpoint.com/documents/R80.10/WebAdminGuides/EN/CP_R80.10_SitetoSiteVPN_AdminGuide/html_frameset.htm

Re: How to configure Keepalive?

Wang — Fri, 25 Oct 2019 07:48:46 GMT

I am very sorry that I still cannot find the relevant configuration

Re: How to configure Keepalive?

PhoneBoy — Fri, 25 Oct 2019 16:48:15 GMT

What is the remote end of the VPN in this case?
The more you can tell us about the proposed environment, the more focused of an answer we can give you.

Something more focused on DPD: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk97746