How does MSR IKE DPD work?

关键词:
问题描述

How does MSR IKE DPD work?

 

QHow does MSR IKE DPD word

A

DPD has 2 parameters: idle timer and overtime timer. Idle timer is used to judge whether need to send DPD request. If idle timer finished, but still not receive encrypted packet, thus need DPD check. Otherwise during the idle time, if receives one encrypted packet, the idle timer will be reset. DPD is checked by overtime timer. Overtime timer is used to judge if need to resend request. Generally, send three time requests(request->overtime->request->overtime->request->overtime) and don’t receive any DPD response, we should delete SA. If send encrypted packet later, that needs re-negotiate SA. At the same time, if receives encrypted packet, that means the original SA will notify the opposite port to re-negotiate SA.

案例信息

案例类型:FAQ
案例号:KMS - 16377
创建时间:2009年1月15日
更新时间:2009年1月17日
发布时间:2009/1/17 5:13:23
文章密级:游客可见
有效期:长期有效
发布者:纪合宝【技术大咖】 [j03195]
点击次数:531
评论平均得分:0
关键词:
产品线:中低端路由器
产品系列:
产品版本:

常用操作
收藏