HP VPN Firewall Appliances VPN Command Reference

53
undo sa duration
Default
The ISAKMP SA lifetime is 86400 seconds.
Views
IKE proposal view
Default command level
2: System level
Parameters
Seconds: Specifies the ISAKMP SA lifetime in seconds, in the range 60 to 604800.
Usage guidelines
Before an SA expires, IKE negotiates a new SA. The new SA takes effect immediately after being set up,
and the old one will be cleared automatically when it expires.
Examples
# Specify the ISAKMP SA lifetime for IKE proposal 10 as 600 seconds (10 minutes).
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] sa duration 600
Related commands
• ike proposal
• display ike proposal
time-out
Use time-out to set the DPD packet retransmission interval for a DPD detector.
Use undo time-out to restore the default.
Syntax
time-out time-out
undo time-out
Views
IKE DPD view
Default command level
2: System level
Parameters
time-out: DPD packet retransmission interval in seconds, in the range 1 to 60.
Usage guidelines
The default DPD packet retransmission interval is 5 seconds.
Examples
# Set the DPD packet retransmission interval to 1 second for dpd2.
<Sysname> system-view