VPN error DPD - ESP

no one?

Hello, Your VPN is configured to use DPD (Dead Peer Dectection). DPD generates keepalive packets at regular interval and wait an answer from the remote peer. If no there' s no answer, the local device tear down the IPSec session. First, check BOTH devices about DPD settings (retry count and retry interval). Even if it' s not recommended you can also try to disable DPD (on both side). Regards, HA

Fantastic!! Thank you very much!!!

Keep in mind , 9 out of 10 times, DPD is enabled and negoiated during the ipsec setup. I don' t think that' s the reason for the ESP error. DPD is mutual-neg before the ESP SA and with in IKE setup and with the vendor capabilities. Also if the DPD keepalive interval are not set correctly , they can reflect lost of neighborship.

Hi, The IPSec Phase2 is going down BECAUSE the DPD fails. It' s written in the log... In fact, some platform, like Checkpoint, doesn' t support DPD. As said before, DPD keepalive timers must be configured correctly... Regards, HA

Ok thanks everybody. My problem was undertand if there was a problem " with IpSec protocol" or with the line... So thank for explanations and I change the phone line