(Optional) Enabling Keepalive Detection
Context
After the Keepalive detection function is enabled, the local device periodically sends Keepalive probes to the peer to check tunnel connectivity. If the peer is reachable, the local device receives a reply packet from the peer. If a reply packet is not received, the local device disconnects the tunnel connection.
Keepalive detection takes effect on one end of the tunnel as long as it is configured with the Keepalive detection function. The other end of the tunnel is not required to configure Keepalive detection. To ensure that both ends of the tunnel can detect whether the peer is reachable, you are advised to enable Keepalive detection on both ends.
If the VPN instance bound to the tunnel interface is different from the VPN instance to which the destination IP address of the tunnel interface belongs, the Keepalive detection function cannot be enabled on the peer tunnel interface.