2166 CHAPTER 141: IKE CONFIGURATION COMMANDS
By default, no keepalive packet is sent.
Note that the keepalive timeout configured at the local end must be longer than
the keepalive interval configured at the remote end. Since it seldom occurs that
more than three consecutive packets are lost on a network, the keepalive timeout
can be configured to be three times of the keepalive interval.
Related command: ike sa keepalive-timer interval.
Example # Set the keepalive timeout to 20 seconds.
<Sysname> system-view
[Sysname] ike sa keepalive-timer timeout 20
ike sa nat-keepalive-timer interval
Syntax ike sa nat-keepalive-timer interval seconds
undo ike sa nat-keepalive-timer interval
View System view
Parameter seconds: NAT keepalive interval in seconds, in the range 5 to 300.
Description Use the
ike sa nat-keepalive-timer interval command to set the NAT
keepalive interval.
Use the
undo ike sa nat-keepalive-timer interval command to disable the
function.
By default, no NAT keepalive packet is sent.
Example # Set the NAT keepalive interval to 5 seconds.
<Sysname> system-view
[Sysname] ike sa nat-keepalive-timer interval 5
interval-time
Syntax interval-time interval-time
undo interval-time
View IKE DPD view
Parameter interval-time: Interval in seconds at which DPD query is triggered if no IPSec packet
is received from the peer, in the range 1 to 300.
