IPSec Configuration

This section explains the IPsec settings that control tunnel behavior, replay protection, and keepalive checks.

Tunnel

Specify a IPsec tunnel down detection time. The minimum is 20 Seconds. If Controller is selected, all gateways share the same tunnel down detection time.

Aviatrix gateways samples the tunnel status every 10 seconds.

Anti-replay Window

Specify the IPSec tunnel anti-replay window size.

The size range is 0 to 4096. The default value is 0. Set the size to 0 to disable anti-replay protection. If “controller” of “Aviatrix Entity” is selected, all gateways share the same tunnel anti-replay window.

Keepalive

In normal state, Aviatrix gateways send keep alive messages to the Controller. Keep Alive Speed determines when Controller determines if a gateway is down.