R3166-R3206-HP High-End Firewalls VPN Command Reference-6PW101

24
View
System view
Default level
2: System level
Parameters
seconds: ISAKMP SA keepalive timeout in seconds, in the range 20 to 28,800.
Description
Use the ike sa keepalive-timer timeout command to set the ISAKMP SA keepalive timeout.
Use the undo ike sa keepalive-timer timeout command to disable the function.
By default, no keepalive packet is sent.
The keepalive timeout configured at the local end must be longer than the keepalive interval configured
at the remote end. Since it seldom occurs that more than three consecutive packets are lost on a network,
the keepalive timeout can be configured to be three times of the keepalive interval.
Related commands: ike sa keepalive-timer interval.
Examples
# Set the keepalive timeout to 20 seconds.
<Sysname> system-view
[Sysname] ike sa keepalive-timer timeout 20
ike sa nat-keepalive-timer interval
Syntax
ike sa nat-keepalive-timer interval seconds
undo ike sa nat-keepalive-timer interval
View
System view
Default level
2: System level
Parameters
seconds: NAT keepalive interval in seconds, in the range 5 to 300.
Description
Use the ike sa nat-keepalive-timer interval command to set the NAT keepalive interval.
Use the undo ike sa nat-keepalive-timer interval command to disable the function.
By default, the NAT keepalive interval is 20 seconds.
Examples
# Set the NAT keepalive interval to 5 seconds.
<Sysname> system-view
[Sysname] ike sa nat-keepalive-timer interval 5