HP VPN Firewall Appliances VPN Command Reference

42
Parameters
proposal-number: IKE proposal number, in the range 1 to 65535. The lower the number, the higher the
priority of the IKE proposal. During IKE negotiation, a high priority IKE proposal is matched before a low
priority IKE proposal.
Usage guidelines
The system provides a default IKE proposal, which has the lowest priority and uses these settings:
• Encryption algorithm DES-CBC
• Authentication algorithm HMAC-SHA1
• Authentication method Pre-shared key
• DH group MODP_768
• SA lifetime 86400 seconds
Examples
# Create IKE proposal 10 and enter IKE proposal view.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]
Related commands
display ike proposal
ike sa keepalive-timer interval
Use ike sa keepalive-timer interval to set the ISAKMP SA keepalive interval.
Use undo ike sa keepalive-timer interval to disable the ISAKMP SA keepalive transmission function.
Syntax
ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
Default
No keepalive packet is sent.
Views
System view
Default command level
2: System level
Parameters
seconds: Transmission interval of ISAKMP SA keepalives in seconds, in the range 20 to 28,800.
Usage guidelines
The keepalive interval configured at the local end must be shorter than the keepalive timeout configured
at the remote end.
Examples
# Set the keepalive interval to 200 seconds.
<Sysname> system-view