dead-peer-detection (Services IPsec VPN)
Hierarchy Level
[edit services ipsec-vpn rule-name term term-name then]
Description
Sets
dead peer detection options when dead peer detection has been enabled
with the initiate-dead-peer-detection command. The dead-peer-detection options are used for IKEv1 security associations
(SAs). Starting in Junos OS Release 17.2R1, the dead-peer-detection options are also applicable to IKEv2 SAs. In Junos OS Release 17.1
and earlier, the dead-peer-detection options are not applicable
to IKEv2 SAs, which use the default values.
Options
interval—Specify the amount of time that the peer waits for dead-peer-detection (DPD) response from its destination peer before sending next DPD request packet. Range is 1 through 180 seconds. The default value is 10 seconds.
threshold—Specify the maximum number of unsuccessful dead peer detection (DPD) requests to be sent before the peer is considered unavailable. Range is 1 through 10. The default value is 3.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.4.
IKEv2 support introduced in Junos OS Release 17.2.