keepalive (VPN)

Last Updated : Nov 06, 2012 |
Used in crypto isakmp peer interface context to enable DPD (Dead Peer Detection) keepalives that check whether the remote peer is up. Use no keepalive to disable DPD keepalives (default setting).
Prolog information
Metadata
Keywords:

Syntax

[no] keepalive [seconds [retry retry-seconds] [on-demand | periodic] ]

Parameters

Parameter
Description
Possible Values
Default Value
seconds
The number of seconds between DPD keepalive probes
10-3600
retry-seconds
The number of seconds between retries if keepalive fails
2-60
on-demand
Keyword indicating to send DPD probes only when data traffic is sent to the remote peer
periodic
Keyword indicating to send DPD probes periodically, regardless of whether data traffic is being sent to the remote peer

User level

read-write

Context

crypto isakmp peer

Example

To enable DPD keepalives, setting the rate to 10 seconds and retries to 2:
Gxxx-001(config-peer:149.49.70.1)# keepalive 10 retry 2