R3102-R3103-HP 6600/HSR6600 Routers Security Command Reference

341
Setting Non-FIPS mode FIPS mode
Authentication
algorithm
HMAC-SHA1 SHA
Authentication method Pre-shared key Pre-shared key
DH group MODP_768 MODP_1024
SA lifetime 86400 seconds 86400 seconds
Examples
# Create IKE proposal 10 and enter IKE proposal view.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]
Related commands
display ike proposal
ike sa keepalive-timer interval
Use ike sa keepalive-timer interval to set the ISAKMP SA keepalive interval.
Use undo ike sa keepalive-timer interval to disable the ISAKMP SA keepalive transmission function.
Syntax
ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
Default
No keepalive packet is sent.
Views
System view
Default command level
2: System level
Parameters
seconds: Transmission interval of ISAKMP SA keepalives in seconds, in the range 20 to 28,800.
Usage guidelines
The keepalive interval configured at the local end must be shorter than the keepalive timeout configured
at the remote end.
Examples
# Set the keepalive interval to 200 seconds.
<Sysname> system-view
[Sysname] ike sa keepalive-timer interval 200
Related commands
ike sa keepalive-timer timeout