Re: [j-nsp] vpn monitor vs dead peer detection

2012-08-30 Thread Burkhard Ott
On Thu, 30 Aug 2012 14:42:11 + "OBrien, Will" wrote: > We've had issues with vpn monitor tearing down tunnels too often with > 10. code on SRXs. I'm currently trying out dead peer detection at the > ike level. I haven't found a good document that describes what dead > peer detection does - I

[j-nsp] vpn monitor vs dead peer detection

2012-08-30 Thread OBrien, Will
We've had issues with vpn monitor tearing down tunnels too often with 10. code on SRXs. I'm currently trying out dead peer detection at the ike level. I haven't found a good document that describes what dead peer detection does - I know it send R-U-THERE etc, but I don't know what it does when th