Command Reference Guide

3Com Router 3000 Ethernet Family
Command Reference Guide
Chapter 6 IKE Configuration Commands
3Com Corporation
6-16
Description
Use the ike sa keepalive-timer timeout command to configure a timeout for ISAKMP
SA to wait for the Keepalive packet.
Use the undo ike sa keepalive-timer timeout command to disable the function.
By default, this function is disabled.
This command is used to configure the timeout for the remote end to send the
Keepalive packet. IKE maintains the link state of the ISAKMP SA by using the
Keepalive packet. When the remote end in the configured timeout does not receive the
Keepalive packet, the ISAKMP SA with the TIMEOUT flag and the IPSec SA
corresponding to it will be deleted, and otherwise the ISAKMP SA without the
TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout should be
longer than the interval for sending the Keepalive packet during configuration.
Generally, packets will not be lost for more than three consecutive times in the network,
so the timeout can be configured as three times of the interval set for the remote end to
send Keepalive packets.
Related command: ike sa keepalive-timer interval.
Example
# Configure the timeout as 20 seconds for the local end to wait for the remote end to
send the Keepalive packet.
[3Com] ike sa keepalive-timer timeout 20
6.1.18 ike sa nat-keepalive-timer interval
Syntax
ike sa nat-keepalive-timer interval seconds
undo ike sa nat-keepalive-timer interval
View
System view
Parameter
seconds: Specifies the NAT keepalive interval for IKE peers, in the range 5 to 300
seconds.
Description
Use the ike sa nat-keepalive-timer interval command to configure the NAT keepalive
interval for IKE peers.
Use the undo ike sa nat-keepalive-timer interval command to disable NAT keepalive
for IKE peers.