IKE Global
Settings |
Response Bad SPI
|
Enable response to invalid IPsec Security Parameter Index (SPI)
values. If the SAs between two peers of an IPsec VPN become unsynchronized,
the device resets the state of a peer so that the two peers are synchronized.
|
Click the check box if you want the device to respond to IPsec
packets with bad SPI values.
|
Maximum Responses
|
Number of times to respond to invalid SPI values per gateway
|
Enter a value between 1 and 30. The default is 5. Disabled by
default.
|
IPsec Global
Settings |
VPN Monitor Options
|
Configure VPN monitoring options.
|
Click the check box if you want the device to monitor VPN liveliness.
|
Interval
|
Interval at which to send ICMP requests to the peer.
|
Enter a value from 1 through 36,000 seconds.
|
Threshold
|
The number of consecutive unsuccessful pings before the peer
is declared unreachable.
|
Enter a value from 1 through 65,536.
|