Cisco Cisco Packet Data Gateway (PDG) Folheto
IPSec Network Applications
IPSec for LTE/SAE Networks ▀
Cisco StarOS IP Security (IPSec) Reference ▄
51
IKEv2 Keep-Alive Messages (Dead Peer Detection)
IPSec for LTE/SAE supports IKEv2 keep-alive messages, also known as Dead Peer Detection (DPD), originating from
both ends of an IPSec tunnel. Per RFC 3706, DPD is used to simplify the messaging required to verify communication
between peers and tunnel availability. You configure DPD on each IPSec node. You can also disable DPD, and the node
will not initiate DPD exchanges with other nodes. However, the node always responds to DPD availability checks
initiated by another node regardless of its DPD configuration.
both ends of an IPSec tunnel. Per RFC 3706, DPD is used to simplify the messaging required to verify communication
between peers and tunnel availability. You configure DPD on each IPSec node. You can also disable DPD, and the node
will not initiate DPD exchanges with other nodes. However, the node always responds to DPD availability checks
initiated by another node regardless of its DPD configuration.
For additional information refer to the Dead Peer Detection (DPD) Configuration section of the Redundant IPSec
Tunnel Fail-over chapter of this guide.
Tunnel Fail-over chapter of this guide.
E-UTRAN/EPC Logical Network Interfaces Supporting IPSec Tunnels
The figure below shows the logical network interfaces over which secure IPSec tunnels can be created in an EUTRAN/
EPC (Evolved UMTS Terrestrial Radio Access Network/Evolved Packet Core) network. The table that follows the
figure provides a description of each logical network interface.
EPC (Evolved UMTS Terrestrial Radio Access Network/Evolved Packet Core) network. The table that follows the
figure provides a description of each logical network interface.
Figure 8.
E-UTRAN/EPC Logical Network Interfaces Supporting IPSec Tunnels