This task is part of the network policy configuration
workflow. Use this task to to configure the
Advanced Client Options for a VPN service when you
configure router settings.
Go to Configure > Network Policies.
Select an existing network
policy, and then select , or select .
After you save the Policy Details, select
5 Branch
Routing.
From the Router Settings
menu, select VPN
Service.
Select an existing VPN service,
and then select , or select .
In the Optional Settings section, expand
Advanced Client Options.
Select Enable NAT
Traversal to enable VPN traffic to traverse NAT devices.
Configure the DPD
(Dead Peer Detection) Settings.
The DPD and tunnel heartbeat settings control when to fail over from the
primary to the secondary VPN server. The DPD messages verify the presence of
an IKE peer, and AMRP (Advanced Mobility Routing Protocol) tunnel heartbeats
verify communications through the GRE and VPN tunnel. The failure of either
mechanism can trigger a failover.
Set the Heartbeat Interval for sending DPD R-U-There heartbeat
messages from the VPN client to the VPN gateway.
Set the number of times to retry sending a DPD R-U-There message when
it does not elicit a response.
, or select 
.