Twin WAN Series – User Guide | v1
The
Dead Peer Detection Feature
is also a main component of VPN failover. When it is
enabled, the Twin WAN Gateway will send packets to the remote VPN gateway to verify
that the tunnel is still connected. When a dropped tunnel is detected the XiNCOM will
change the logical state of that tunnel to Idle.
Dead Peer Detection Feature - Settings
Detection
This check box will enable Dead Peer Detection and you will be able to set options.
Check Method
Select a method of verification: ICMP, Heartbeat, or Keep Alive
Check After Idle
When no traffic is passed through the VPN tunnel for this amount of time, the TWR VPN
Gateway will attempt to send a Detection packet.
Retry Times
This is the amount of times the XiNCOM VPN Gateway will attempt to send the packet
before the Check After Idle time is expired.
Action
These options instruct the router on what action to take if a dead tunnel is discovered. It
can ignore the dead tunnel, disconnect the dead tunnel or attempt to keep it alive.
Logging
This check box simply enables the Logging function for DPD (Dead Peer Detection). If
this feature is enabled all actions of DPD will show up in the VPN Log.
Figure 18-b. Policy Setup - Options Sub-Console.
The
Options
section allows you to set options for handling the VPN tunnel. These
options must be set on both the local and the remote side in order to properly function.
Failure to do so may result in dropped or corrupted packets.
The Options sub-console screen is located in Policy Setup>Actions>Set Options.
Copyright © 2005 WINS International, LLC dba XiNCOM | All rights reserved.
70
