
Media Access Control number of an interface. Source address of the tunnel packets, local on the router. By default keepalive is set to 10 seconds and 10 retries. Parameters are written in following format: KeepaliveInterval,KeepaliveRetries where KeepaliveInterval is time interval and KeepaliveRetries - number of retry attempts.

If configured time,retries fail, interface running flag is removed. Tunnel keepalive parameter sets the time interval in which the tunnel running flag will remain even if the remote end of tunnel goes down. When secret is specified, router adds dynamic IPsec peer to remote-address with pre-shared key and policy (by default phase2 uses sha1/aes128cbc). Inherited option means that dscp value will be inherited from packet which is going to be encapsulated. Whether to include DF bit in related packets.ĭscp ( integer: 0-63 Default: inherited)ĭSCP value of packet. When enabled, a router will change the MSS size for received TCP SYN packets if the current MSS size exceeds the tunnel interface MTU (taking into account the TCP/IP overhead).The received encapsulated packet will still contain the original MSS, and only after decapsulation the MSS is changed.ĭont-fragment ( inherit | no Default: no) Time interval in which ARP entries should time out.Ĭontrols whether to change MSS size for received TCP SYN packets. Therefore for communications to be successful, a valid static entry must already exist.Īrp-timeout ( integer Default: auto) No dynamic entries will be automatically stored in the "/ip arp" table.


