WIKIABOUT

FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

Most popular tags

rut955 rut240 rut950 rutx11 rms vpn to openvpn wifi not sms trb140 firmware connection - ipsec on rutx12 rutx09 modbus
We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.

Dead Peer Detection in IPSEC

0 votes
847 views 0 comments
by anonymous
Hi,

What is Dead Peer Detection in IPSEC (advanced Settings) ? is it used for Keeping alive the tunnel ?

RUTX11 is a Dialup Client with Fortinet on other side .

The tunnel goes down after 2-3 days but i want it to be alive always .

Kindly assist.

1 Answer

0 votes
by anonymous

Hello,

Dead Peer Detection (DPD, RFC 3706) is used for the other side peer detection where R_U_THERE notification messages (IKEv1) or empty INFORMATIONAL messages (IKEv2) are periodically sent in order to check the liveliness of the IPsec peer. It is recommended to configure it at least on the client side in order to make sure these periodic messages check whether the other peer is "alive" (online). In case of DPD failure any specified action would be taken (restart/hold/clear/none). 

In your case it'd be recommended to configure some specific DPD time value with restart action in case of a failure in order for the IPsec tunnel to (attempt) come back up if it ever goes down. 

More information about this functionality can be found in the following articles:

https://wiki.teltonika-networks.com/view/RUTX11_VPN#Advanced_settings_2 - page about IPsec functionality on any device running the RUTOS firmware.

https://wiki.strongswan.org/projects/strongswan/wiki/connsection - page about the IPsec (strongswan) package and brief description of each option.

Best regards,

Tomas.

Best answer