1746 CHAPTER 102: DVPN TUNNEL CONFIGURATION COMMANDS

string of 1 to 15 characters. &<1-6> means that you can specify the argument for up to 6 times.

Description Use the ipsec profile command to configure to reference an IPSec profile on a DVPN tunnel interface.

Use the undo ipsec profile command to cancel the reference of an IPSec profile on a DVPN tunnel interface.

By default, no IPSec profile exists. That is, DVPN tunnels are not protected.

Note that:

IPSec profiles are applicable only for the interfaces of DVPN-type tunnels.

A DVPN tunnel interface can reference only one IPSec profile.

You need cancel the currently referenced IPSec profile on a DVPN tunnel interface before referencing a new one.

Related command: ipsec profile (system view) and interface tunnel on page 884.

Example # Specify to reference IPSec profile dvpnprofile on DVPN tunnel interface Tunnel0 to protect the DVPN tunnel.

<Sysname> system-view [Sysname] interface tunnel 0

[Sysname-Tunnel0] tunnel-protocol dvpn udp

[Sysname-Tunnel0] ipsec profile dvpnprofile

keepalive

Syntax keepalive [ seconds [ times ] ]

undo keepalive

View Tunnel interface view

Parameter seconds: Interval in seconds for transmitting keepalive packets, in the range 1 to 32,767. The default value is 10.

times: Maximum number of attempts for transmitting a keepalive packet, in the range 1 to 255. The default value is 3.

Description Use the keepalive command to set the keepalive interval and the maximum number of attempts for transmitting a keepalive packet.

When the tunneling mode is DVPN, use the undo keepalive command to restore the default.

The command does not allow the Keepalive timer to be triggered immediately until DVPN sessions are set up successfully.

Page 1746
Image 1746
3Com MSR 30, MSR 50 manual Keepalive, Undo keepalive