3com MSR 20-20 참조 매뉴얼

C

HAPTER

 102: DVPN T

UNNEL

 C

ONFIGURATION

 C

OMMANDS

string of 1 to 15 characters. &<1-6> means that you can specify the argument for 
up to 6 times.

Use the ipsec profile command to configure to reference an IPSec profile on a 
DVPN tunnel interface.

Use the undo ipsec profile command to cancel the reference of an IPSec profile 
on a DVPN tunnel interface.

By default, no IPSec profile exists. That is, DVPN tunnels are not protected.

Note that:

IPSec profiles are applicable only for the interfaces of DVPN-type tunnels.

A DVPN tunnel interface can reference only one IPSec profile.

You need cancel the currently referenced IPSec profile on a DVPN tunnel interface 
before referencing a new one.

ipsec profile (system view) and interface tunnel on page 884.

# Specify to reference IPSec profile dvpnprofile on DVPN tunnel interface Tunnel0 
to protect the DVPN tunnel.

<Sysname> system-view

[Sysname] interface tunnel 0

[Sysname-Tunnel0] tunnel-protocol dvpn udp

[Sysname-Tunnel0] ipsec profile dvpnprofile 

keepalive [ seconds [ times ] ]

Tunnel interface view

seconds: Interval in seconds for transmitting keepalive packets, in the range 1 to 
32,767. The default value is 10.

times: Maximum number of attempts for transmitting a keepalive packet, in the 
range 1 to 255. The default value is 3.

Use the keepalive command to set the keepalive interval and the maximum 
number of attempts for transmitting a keepalive packet.

When the tunneling mode is DVPN, use the undo keepalive command to restore 
the default.

The command does not allow the Keepalive timer to be triggered immediately 
until DVPN sessions are set up successfully.