Manualshelf

R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
11121314151617181920
6
Default level
2: System level
Parameters
seconds: Interval in seconds for transmitting keepalive packets, in the range of 1 to 32,767. The default
value is 10.
times: Maximum number of attempts for transmitting a keepalive packet, in the range of 1 to 255. The
default value is 3.
Description
Use keepalive to enable the GRE keepalive function to detect the status of the tunnel interface and set the
keepalive interval and the maximum number of attempts for transmitting a keepalive packet.
Use undo keepalive to disable the keepalive function.
By default, the GRE keepalive function is disabled.
With the GRE keepalive function enabled on a tunnel interface, the firewall sends GRE keepalive packets
from the tunnel interface periodically. If no response is received from the peer within the specified interval,
the firewall retransmits a keepalive packet. If the firewall still receives no response from the peer after
sending the keepalive packet for the maximum number of attempts, the local tunnel interface goes down
and stays down until it receives a keepalive acknowledgement packet from the peer.
Related commands: interface tunnel and display interface tunnel.
Examples
# Set the GRE keepalive interval to 20 seconds and the maximum number of transmission attempts to 5.
<Sysname> system-view
[Sysname] interface tunnel 0
[Sysname-Tunnel0] keepalive 20 5
reset gre p2mp tunnel-table
Syntax
reset gre p2mp tunnel-table [ interface tunnel number [ dest-address tunnel-dest-address] ]
View
User view
Default level
2: System level
Parameters
interface tunnel number: Clears the tunnel entries on the specified tunnel interface. number indicates the
number of the tunnel interface.
dest-address tunnel-dest-address: Clears the specified tunnel entry. dest-address indicates a private IP
address on the branch network, in dotted decimal notation. tunnel-dest-address indicates the tunnel
destination address, in dotted decimal notation.
Description
Use reset gre p2mp tunnel-table to clear the P2MP GRE tunnel entry information.