ipsec s2s disable dpd

[shukimiz]

issue with an ipsec tunnel.  tunnel is up in nat-t mode. traffic between internal lans (vpn domain) sometimes respond randomlly.

got intsructions not to use dpd in ike1  ("DPD -Dead Peer Detection/IKE Keepalive........do NOT use interval")

peer is a cisco device.

my cp is r81 in cluster

how do i disable dpd? does it impact on other ipsec tunnels?

also how do i avoid using nat-t?

appreciate any help thanks

[PhoneBoy]

DPD is definitely discussed here: https://support.checkpoint.com/results/sk/sk108600
NAT-T is primarily used when you or your peer requires NAT.