ike sa keepalive-timer timeout

Syntax

ike sa keepalive-timer timeout seconds

undo ike sa keepalive-timer timeout

View

System view

Default level

2: System level

Parameters

seconds: ISAKMP SA keepalive timeout in seconds, in the range 20 to 28800.

Description

Use the ike sa keepalive-timer timeout command to set the ISAKMP SA keepalive timeout.

Use the undo ike sa keepalive-timer timeout command to disable the function.

By default, no keepalive packet is sent.

The keepalive timeout configured at the local end must be longer than the keepalive interval configured at the remote end. Since it seldom occurs that more than three consecutive packets are lost on a network, the keepalive timeout can be configured to be three times of the keepalive interval.

Related commands: ike sa keepalive-timer interval.

Examples

# Set the keepalive timeout to 20 seconds.

<Sysname> system-view
[Sysname] ike sa keepalive-timer timeout 20