Command Reference Guide

3Com Router 5000 Family and Router 6000 Family ike sa keepalive-timer timeout ● 157
Command Reference
ike sa keepalive-timer timeout
Purpose Use the ike sa keepalive-timer timeout command to configure a timeout
for ISAKMP SA to wait for the Keepalive packet.
Use the undo ike sa keepalive-timer timeout command to disable the
function.
Syntax ike sa keepalive-timer timeout seconds
undo ike sa keepalive-timer timeout
Parameters seconds
Specifies the timeout for ISAKMP SA to wait for the
Keepalive packet. It can be set to a value in the range
20 to 28800.
Default By default, this function is disabled.
Example Configure the timeout as 20 seconds for the local end to wait for the remote end to
send the Keepalive packet.
[3Com] ike sa keepalive-timer timeout 20
View This command can be used in the following views:
■ System view
Description This command is used to configure the timeout for the remote end to send the
Keepalive packet. IKE maintains the link state of the ISAKMP SA by using the
Keepalive packet. When the remote end in the configured timeout does not receive
the Keepalive packet, the ISAKMP SA with the TIMEOUT flag and the IPSec SA
corresponding to it will be deleted, and otherwise the ISAKMP SA without the
TIMEOUT flag will be marked as TIMEOUT. Thus the configured timeout should be
longer than the interval for sending the Keepalive packet during configuration.
Generally, packets will not be lost for more than three consecutive times in the
network, so the timeout can be configured as three times of the interval set for the
remote end to send Keepalive packets.
Related Command ike sa keepalive-timer interval