Description

Irrespective of the dead peer detection (DPD) interval and threshold configuration, the IKEv2 SA is being cleared only after 50 seconds.

Symptoms

The DPD interval and threshold config is not taking effect for IKEv2 SA. IKEV2 SA does not get cleared after 10 sec though DPD Interval and threshold are configured as 10 sec (interval) and 1 (threshold). IKEV2 SA is getting cleared only after 50 sec.

Even if the DPD interval and threshold is configured for maximum 60 sec (interval) and 5 (threshold), the configuration does not take effect and IKEv2 SA will still get cleared only after 50 seconds.

Solution

It is a limitation of current IKEV2 implementation that default value of 50 sec is used even though the DPD interval and threshold values are configured otherwise.

 This issue will be fixed in Junos OS 12.1X46 and onwards.