Zyxel Ipsec VPN Tweaks

Zyxel Ipsec VPN Tweaks

• chk_conn a.k.a. output idle timer. Checks for replies after sending something to the
  remote routers. If no reply is received after the specified time, the router will verify the
  suspected tunnel and, if found dead, will drop it. Number of seconds between 120 and 3600.
  Can not disable. Default is 3600.
• chk_input a.k.a. input idle timer. If no inbound traffic is received for the specified time,
  the tunnel is deemed suspected. The router will verify the vitals and, if found truly dead, drop
  the tunnel. Number of seconds between 30 and 3600. Enter 0 to disable.
• nailed-up will renegotiate the tunnel when SA is expired and/or when above timers knock the
  tunnel down.
  !
  !
  Commands entered as below :

  >ipsec timer chk_conn 30
  >ipsec timer chk_input 5
  >ipsec timer nailed-up

sys edit autoexec.net
!
ipsec config keepAlive active
ipsec config keepAlive ike
ipsec updatePeerIp
!
!
ipsec timer chk_my_ip 10
ipsec timer chk_conn 30
ipsec timer update_peer 15
ipsec timer chk_input 5