FWIW, I'm aware of three implementations that use the following private ISAKMP notify status types for an IKE "ping" using protected ISAKMP NOTIFY's. request - 30000 response - 30002 Derrell