3Com MSR 30, MSR 50 manual Ike sa nat-keepalive-timer interval, Interval-time

2166 CHAPTER 141: IKE CONFIGURATION COMMANDS

By default, no keepalive packet is sent.

Note that the keepalive timeout configured at the local end must be longer than the keepalive interval configured at the remote end. Since it seldom occurs that more than three consecutive packets are lost on a network, the keepalive timeout can be configured to be three times of the keepalive interval.

Related command: ike sa keepalive-timer interval.

Example # Set the keepalive timeout to 20 seconds.

<Sysname> system-view

[Sysname] ike sa keepalive-timer timeout 20

ike sa nat-keepalive-timer interval

Syntax ike sa nat-keepalive-timer interval seconds

undo ike sa nat-keepalive-timer interval

View System view

Parameter seconds: NAT keepalive interval in seconds, in the range 5 to 300.

Description Use the ike sa nat-keepalive-timer interval command to set the NAT keepalive interval.

Use the undo ike sa nat-keepalive-timer interval command to disable the function.

By default, no NAT keepalive packet is sent.

Example # Set the NAT keepalive interval to 5 seconds.

<Sysname> system-view

[Sysname] ike sa nat-keepalive-timer interval 5

interval-time

Syntax interval-time interval-time

undo interval-time

View IKE DPD view

Parameter interval-time: Interval in seconds at which DPD query is triggered if no IPSec packet is received from the peer, in the range 1 to 300.