R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

49
View
System view
Default level
2: System level
Parameters
proposal-number: IKE proposal number, in the range of 1 to 65535. The lower the number, the higher the
priority of the IKE proposal. During IKE negotiation, a high priority IKE proposal is matched before a low
priority IKE proposal.
Description
Use ike proposal to create an IKE proposal and enter IKE proposal view.
Use undo ike proposal to delete an IKE proposal.
The system provides a default IKE proposal, which has the lowest priority and uses these settings:
• Encryption algorithm DES-CBC
• Authentication algorithm HMAC-SHA1
• Authentication method Pre-shared key
• DH group MODP_768
• SA lifetime 86400 seconds
Related commands: display ike proposal.
Examples
# Create IKE proposal 10 and enter IKE proposal view.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]
ike sa keepalive-timer interval
Syntax
ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
View
System view
Default level
2: System level
Parameters
seconds: Transmission interval of ISAKMP SA keepalives in seconds, in the range of 20 to 28,800.
Description
Use ike sa keepalive-timer interval to set the ISAKMP SA keepalive interval.
Use undo ike sa keepalive-timer interval to disable the ISAKMP SA keepalive transmission function.
By default, no keepalive packet is sent.