R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101

59
<Sysname> display ike sa
total phase-1 SAs: 2
connection-id peer flag phase doi status
----------------------------------------------------------------
1 202.38.0.2 RD|ST 1 IPSEC ACTIVE
1 201.31.0.9 RD|ST 1 IPSEC STANDBY
2 202.38.0.2 RD|ST 2 IPSEC ACTIVE
2 201.31.0.9 RD|ST 2 IPSEC STANDBY
flag meaning
RD--READY ST--STAYALIVE RL--REPLACED FD—FADING TO--TIMEOUT
<Sysname> reset ike sa active
<Sysname> display ike sa
total phase-1 SAs: 1
connection-id peer flag phase doi status
----------------------------------------------------------------
1 201.31.0.9 RD|ST 1 IPSEC STANDBY
2 201.31.0.9 RD|ST 2 IPSEC STANDBY
sa duration
Syntax
sa duration seconds
undo sa duration
View
IKE proposal view
Default level
2: System level
Parameters
Seconds: Specifies the ISAKMP SA lifetime in seconds, in the range of 60 to 604800.
Description
Use sa duration to set the ISAKMP SA lifetime for an IKE proposal.
Use undo sa duration to restore the default.
By default, the ISAKMP SA lifetime is 86400 seconds.
Before an SA expires, IKE negotiates a new SA. The new SA takes effect immediately after being set up,
and the old one will be cleared automatically when it expires.
Related commands: ike proposal and display ike proposal.
Examples
# Specify the ISAKMP SA lifetime for IKE proposal 10 as 600 seconds (10 minutes).
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] sa duration 600