3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

IKE Configuration Commands 419
Related command: ike sa keepalive-timer interval.
Example
# Configure the timeout as 20 seconds for the local end to wait for the remote
end to send the Keepalive packet.
[SecBlade_VPN] ike sa keepalive-timer timeout 20
ike sa
nat-keepalive-timer
interval
Syntax
ike sa nat-keepalive-timer interval seconds
undo ike sa nat-keepalive-timer interval
View
System view
Parameter
seconds: Time interval for the IKE peer to send NAT Keepalive packets, in the
range 5 to 300 (seconds).
Description
Use the ike sa nat-keepalive-timer interval command to define the time
interval for the IKE peer to send NAT Keepalive packets.
Use the undo ike sa nat-keepalive-timer interval command to restore the
default time interval for the IKE peer to send NAT Keepalive packets.
When configuring this command, make sure that the specified time interval is less
than the timeout time for NAT traversal.
By default, the time interval for the IKE peer to send NAT Keepalive packets is 20
seconds.
Example
# Configure the IKE peer to send NAT Keepalive packets every 30 seconds.
[SecBlade_VPN] ike sa nat-keepalive-timer interval 30
local Syntax
local { multi-subnet | single-subnet }
undo local
View
IKE-peer view
Parameter
multi-subnet: Sets the subnet type to multiple.
single-subnet: Sets the subnet type to single.