Do Huawei Cloud VPNs Have the DPD Mechanism Enabled?
Yes.
Huawei Cloud VPNs have the DPD mechanism enabled by default to detect the IKE process status in the on-premises data center.
After three consecutive detection failures, Huawei Cloud considers that the IKE process in the on-premises data center is abnormal. In this case, Huawei Cloud deletes the local tunnel to ensure tunnel synchronization between the two ends.
The DPD protocol does not require that the peer end be configured synchronously, but requires that the peer end can respond to DPD detections. To ensure that the tunnel status of the two ends is consistent and avoid that one end has a tunnel and the other not, it is recommended that you enable the DPD mechanism on your on-premises gateway to detect the IKE process status of the VPN service on Huawei Cloud.
After DPD fails, the tunnel will be deleted without affecting service stability.
DPD can detect exceptions in the IKE process at the peer end in time and reset the tunnel to ensure tunnel synchronization between the two ends. After a tunnel is deleted, if there is traffic transmitted over the tunnel, the tunnel can be re-established through negotiation.
Connection or Ping Failure FAQs
- Why Is the VPN Connection Always in the Not Connected State Even After Its Configuration Is Complete?
- How Can I Prevent VPN Disconnections?
- How Do I Quickly Restore an Interrupted IPsec VPN Connection?
- What Happens If the Bandwidth of a VPN Gateway Exceeds the Size I Specified When I Create the Gateway?
- Will an IPsec VPN Connection Be Established Automatically?
- Why ECSs at Both Ends of a Normal Cross-Region VPN Connection Cannot Access Each Other?
- Why Subnets at Both Ends of a Normal VPN Connection Cannot Access Each Other?
- What Do I Do If a VPN Connection In Use Is Interrupted and a Message Is Displayed Indicating That Traffic from IP Addresses Not Whitelisted Generates?
- What Do I Do If a VPN Connection Is Interrupted and a Message Is Displayed Indicating That the DPD Times Out?
- Why the Status of a VPN Connection Is Not Connected on the Management Console When It Is Already Available?
- Will I Be Notified If a VPN Connection Is Interrupted?
- What Can I Do If VPN Connection Setup Fails?
- What Should I Do If I Cannot Access the ECSs on the Cloud from My On-premises Data Center or LAN After the VPN Connection Has Been Set Up?
- Why Is Not Connected Displayed as the Status for a Successfully Created VPN Connection?
- Do Huawei Cloud VPNs Have the DPD Mechanism Enabled?
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbotmore
