[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Heartbeats (was RE: keepalives)
"Michael C. Richardson" wrote:
> I mean, if you have only one phase 2 SA, then you can use it. If you have
> multiple phase 2 SAs, or you have accounting issues, then you shouldn't mind
> creating an ICMP-only SA.
> My use of "primary" was confusing.
So, you advocating creating special ICMP heartbeat IPSec SA that terminates on the gateway (ESP/Transport)?
I thought you didn't like the overhead and complexity?
Follow-Ups:
References: