3com MSR 20-20 참조 매뉴얼

C

HAPTER

 141: IKE C

ONFIGURATION

 C

OMMANDS

By default, no keepalive packet is sent.

Note that the keepalive timeout configured at the local end must be longer than 
the keepalive interval configured at the remote end. Since it seldom occurs that 
more than three consecutive packets are lost on a network, the keepalive timeout 
can be configured to be three times of the keepalive interval.

ike sa keepalive-timer interval.

# Set the keepalive timeout to 20 seconds.

<Sysname> system-view

[Sysname] ike sa keepalive-timer timeout 20 

ike sa nat-keepalive-timer interval seconds

System view

seconds: NAT keepalive interval in seconds, in the range 5 to 300.

Use the ike sa nat-keepalive-timer interval command to set the NAT 
keepalive interval.

Use the undo ike sa nat-keepalive-timer interval command to disable the 
function.

By default, no NAT keepalive packet is sent.

# Set the NAT keepalive interval to 5 seconds.

<Sysname> system-view

[Sysname] ike sa nat-keepalive-timer interval 5 

interval-time interval-time

IKE DPD view

interval-time: Interval in seconds at which DPD query is triggered if no IPSec packet 
is received from the peer, in the range 1 to 300.