Configure VPN Keep-Alives for Circuit Categories

Let us learn to configure VPN Keep-Alives for circuit categories.
For metered links, where there is a cost for usage (such as LTE interfaces), VPN keep-alives can be adjusted to minimize the usage of the link and any costs associated with using the link. VPN keep-alives can also be modified for unreliable circuits that experience high latency and loss such as satellites.
  1. Navigate to
    Policies (Original)
    , or
    Stacked Policies
    , or
    Security Policies (Original)
    , select
    Circuit Categories
    .
  2. Edit a circuit category and enter values for
    Keep-Alive Failure Count
    and
    Keep-Alive Interval
    .
    • For
      Keep-Alive Failure Count
      , enter a value between 3 and 30.
      The
      Keep-Alive Failure Count
      indicates the number of consecutive missed keep-alive packets before a link is declared as down. The default value is 3.
    • For
      Keep-Alive Interval
      , enter a value between 100 ms and 600000 ms.
      The
      Keep-Alive Interval
      indicates the time interval in milliseconds between two VPN keep-alive packets. The default value is1000 ms.
  3. Select
    Use for Controller Connections
    and
    Use for Application Reachability Probes
    , as required for this selected circuit category.
  4. Click
    Update
    .

Recommended For You