Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
GG27
Contributor

VPN and DPD configuration

Hello

in according to the R80.10 VPN documentation, for enabling DPD as method for the permanent tunnel, I need to change the parameter tunnel_keepalive_method property for each gateway in the community.

With the statement "for each gateway in the community" means you have to perform the change at the remote peer object and at the CKP gateway object as well.

The same CKP gw object is used in other VPN community with permanent tunnel on but based on tunnel_test protocol because s2s with other CKP gateway.

I'm worried about the impact it could introduce.

My question is

   what happens if I will configure the parameter to DPD on ckpgw used in different community?

I'd like to know what is the permanent tunnel protocol used in the following scenario

ckpgw1 tunnel_keepalive_method: dpd

ckpgw2 tunnel_keepalive_method: tunnel_test

3rdgw1: dpd

VPN community1

   center gateway: ckpgw1

   satellite gateway: ckpgw2

   permanent tunnel: on all tunnels in the community

keepalive is based on .... (dpd/tunnel_test/not working)

VPN community2

   center gateway: ckpgw1

   satellite gateway: 3rdgw1

   permanent tunnel: on all tunnels in the community

keepalive is based on .... (dpd/tunnel_test/not working)

 

thank you in advanced

0 Kudos
2 Replies
This widget could not be displayed.