Command Reference Guide

156 ● ike sa keepalive-timer interval 3Com Router 5000 Family and Router 6000 Family
Command Reference
ike sa keepalive-timer interval
Purpose Use the ike sa keepalive-timer interval command to configure the
interval for sending Keepalive packet to the remote end through ISAKMP SA.
Use the undo ike sa keepalive-timer interval command to disable the
function.
Syntax ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
Parameters seconds
Specifies the interval for sending Keepalive packet to
the remote end through ISAKMP SA. It can be set to a
value in the range 20 to 28800.
Default This function is enabled automatically when IPSec implements NAT traversal, and the
default interval time is 20 seconds.
By default, this function is disabled.
Example Configure the interval as 20 seconds for the local end to send Keepalive packet to the
remote end.
[3Com] ike sa keepalive-timer interval 20
View This command can be used in the following views:
■ System view
Description This command is used to configure the interval for sending Keepalive packet to the
remote end through ISAKMP SA. IKE maintains the link state of the ISAKMP SA by
using the Keepalive packet. In general, if a timeout is configured at the remote end by
using the
ike sa keepalive-timer timeout command, an interval for
sending Keepalive packet must be configured at the local end. When the remote end
in the configured timeout time does not receive the Keepalive packet, the ISAKMP SA
with the TIMEOUT flag and the IPSec SA corresponding to it will be deleted, and
otherwise the ISAKMP SA without the TIMEOUT flag will be marked as TIMEOUT.
Thus the configured timeout should be longer than the interval for sending the
Keepalive packet during configuration.
Related Command ike sa keepalive-timer timeout