Support Support Downloads Knowledge Base Service Request Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

What is IKE Heartbeat Hello, Reconnect, and Threshold used for?

0

0

Article ID: KB6491 KB Last Updated: 02 Jul 2010Version: 4.0
Summary:
What is IKE Heartbeat Hello, Reconnect, and Threshold used for?
Symptoms:
Environment:
  • Advanced Options in Autokey > Gateway
  • Heartbeat Hello
  • Heartbeat Threshold
  • Heartbeat Reconnect
Solution:

This solution applies to ScreenOS 4.0.0 and above:

The Heartbeat options in the Advanced screen of Autokey > Gateway refers to the IKE Heartbeat functions.  When the Heartbeat Hello option is enabled, the NetScreen sends an IKE Heartbeat Hello to the other gateway.  If the NetScreen does not receive the hello packet, it will assume there is a problem with the tunnel, and it will tear down its Phase 1 and Phase 2 proposals.  For more information on this, please see KB6046.

The Reconnect feature will keep a VPN tunnel up, even after the phase 2 lifetime has expired. 

Please note that IKE Heartbeat feature can only be used exclusively between two NetScreen devices.


Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Security Alerts and Vulnerabilities

Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search