3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

IKE Configuration 179
By default, the subnet type of both the local end and the remote end is
single-subnet.
Configuring Keepalive
Timer
Configuring keepalive interval
Configure time interval for ISAKMP SA to transmit hold packet to the peer.
Perform the following configuration in system view.
IKE will maintain the ISAKMP SA link state through this packet. Generally, if the
peer has used the ike sa keepalive-timer timeout command to configure
timeout time, this Keepalive interval must be configured on local end. When the
peer did not receive this Keepalive packet within configured timeout time, this
ISAKMP SA and its corresponding IPsec SA will be deleted. Therefore, the
configured timeout time should be longer than Keepalive packet transmission
time.
By default, this function is invalid.
Configuring keepalive timeout time
Configure timeout time for ISAKMP SA waiting for Keepalive packet.
Perform the following configuration in system view.
IKE maintains this ISAKMP SA link status through this packet. If the peer Keepalive
packet is not received within configured timeout time, the ISAKMP SA and its
corresponding IPsec SA will be deleted. Therefore, configured timeout time should
be longer than Keepalive packet transmission time.
Tab le 180 Configure subnet type of the IKE peer
Operation Command
Configure subnet type of the local GW local { multi-subnet | single-subnet }
Restore the default subnet type of the local
GW
undo local
Configure subnet type of the peer GW peer { multi-subnet | single-subnet }
Restore the default subnet type of the peer
GW
undo peer
Tab le 181 Configure time interval for Keepalive packet transmission
Operation Command
Configure time interval for ISAKMP SA to
transmit Keepalive packet to the peer
ike sa keepalive-timer interval seconds
Disable the above function undo ike sa keepalive-timer interval
Tab le 182 Configure timeout waiting time for Keepalive packet
Operation Command
Configure ISAKMP SA timeout time for
waiting Keepalive packet
ike sa keepalive-timer timeout seconds
Disable this function undo ike sa keepalive-timer timeout