Description: LANCOM routers and access points provide the following mechanisms for monitoring lines and connections: LCP polling, Dead Peer Detection, and ICMP polling. This document describes where these mechanisms are configured and which parameters are available. Requirements:LCP polling (line control protocol):LCP polling is configured at the following locations:
LANconfig: Menu Communication → Protocols → PPP list → <Remote site> → Time- The value entered is multiplied by the factor 10 to specify the polling interval.
- The default value is 0, which disables LCP polling.
- The number of Retries is specified in the field below it.
Command line: Path /Setup/WAN/PPP/- The command set <remote site name> {Time} <value> is used to enter or change a value (e.g. set TEST {Time} 3).
- The value entered is multiplied by the factor 10 to specify the polling interval.
- The number of retries is is set with the command set <remote site name>{Try} <value> (e.g. set TEST {Try} 10).
ICMP Polling (Internet Control Message Protocol): ICMP polling (ping) is configured at the following locations: LANconfig: Menu Communication → Protocols → Polling table- Remote site to be monitored.
- Target IP address(es) 1 to 4 (at least one IP address must be entered)
- Time before retrying ICMP polling (every X seconds)
- Number of retries, each 1 second apart
Process with a value of 40 seconds and 3 repetitions:- Creation of an ICMP Packet
- Wait 40 seconds for an answer => Result: no response
- 1st repetition
- Wait 5 seconds for an answer
- 2nd repetition
- Wait 3 seconds for an answer
- 3rd and last repetition
- Wait 1 second for an answer
Command line: Path /Setup/WAN/Polling-Table/ - With the command set <remote site name> <IP address 1> <IP address 2> <IP address 3> <IP address 4> <Ping-Interval> <Retries> you can enter or change your values (e.g. set 1und1 8.8.8.8 {Time} 5 {Try} 2).
DPD (Dead Peer Detection): Dead Peer Detection can be configured for VPN connections at the following locations: LANconfig: Menu VPN -> General -> Connection list -> <vpn connection name>
Dead Peer Detection can be specified for each VPN connection here. This prompts a DPD packet to be sent if no packet is received over the VPN tunnel for the specified amount of time.
Sequence with a value of 60 seconds:- 60 seconds go by without receiving a packet
- A DPD package is generated
- Wait 60 seconds for response
- 1st retry
- Wait 10 seconds
- 2nd retry
- Wait 10 seconds
- 3rd and final retry
- Wait 10 seconds
- Terminate the VPN connection
Command line: Path /Setup/VPN/VPN-Peers - The command set <vpn connection name> {DPD-Inact-Timeout} <value> is used to enter or change a value (e.g. set TEST {DPD-Inact-Timeout} 60).
|
|