You want to ensure end-to-end data connectivity through an IPsec tunnel.
Which feature would you activate?
A.
DPD
B.
VPN monitor
C.
perfect forward secrecy
D.
NHTB
Which feature would you activate?
You want to ensure end-to-end data connectivity through an IPsec tunnel.
Which feature would you activate?
http://www.juniper.net/documentation/en_US/junos12.1×46/topics/concept/ipsec-dead-peer-detection-understanding.html
You can use DPD as an alternative to VPN monitoring. However, you cannot use both features simultaneously. VPN monitoring applies to an individual IPsec VPN, while DPD is configured only in an individual IKE gateway context.
DPD > monnitoring IKE gateway
VPN monitor > monitoring IPsec VPN (tunnel)