keepalive (VPN)

Last Updated : Nov 06, 2012 |

Used in crypto isakmp peer interface context to enable DPD (Dead Peer Detection) keepalives that check whether the remote peer is up. Use no keepalive to disable DPD keepalives (default setting).

Syntax

[no] keepalive [seconds [retry retry-seconds] [on-demand | periodic] ]

Parameters

Parameter

Description

Possible Values

Default Value

seconds

The number of seconds between DPD keepalive probes

10-3600

retry-seconds

The number of seconds between retries if keepalive fails

2-60

on-demand

Keyword indicating to send DPD probes only when data traffic is sent to the remote peer

periodic

Keyword indicating to send DPD probes periodically, regardless of whether data traffic is being sent to the remote peer

User level

read-write

Context

crypto isakmp peer

Example

To enable DPD keepalives, setting the rate to 10 seconds and retries to 2:

Gxxx-001(config-peer:149.49.70.1)# keepalive 10 retry 2