A Traffic-Based Method of Detecting Dead IKE Peers

摘要

This draft describes a method of detecting a dead IKE peer. Themethod, called Dead Peer Detection (DPD) uses IPSec traffic patternsto limit the number of IKE messages sent. DPD, like other keepalivemechanisms, is often necessary to perform IKE peer failover, or toreclaim lost resources.