Hi everyone

i have establised Gre tunnel over Ipsec on my Linux to a cisco router/ASA Firewall, however , i also turn on keepalive feature on cisco interface but i can not find out a way on linux site. it makes the gre interface going down on cisco router site.

and i know there is a way to turn on TCP keepalive function with changing the vaule of some file under /proc/

-----------------------------------
example:
echo '4' > /proc/sys/net/ipv4/tcp_keepalive_time
echo '3' > /proc/sys/net/ipv4/tcp_keepalive_intrvl
echo '3' > /proc/sys/net/ipv4/tcp_keepalive_probe
------------------------------------

i believe that only affect established TCP Connection, and have few concern on inteface keepalive .

i started ospf process between this two machines , keepalive function is a very important for me to deploy this scheme and help me to control route.

please help me to figure out this.

I suspect you're attacking the wrong end of the celery - effectively the router should be suggesting the keepalive (if, as you say, it is set on the router) for your box, not the other way round... What model of router are you using?

Cisco 1812j