Setting the maximum number of IKE SAs
You can set the maximum number of half-open IKE SAs and the maximum number of established IKE SAs.
The supported maximum number of half-open IKE SAs depends on the device's processing capability. Adjust the maximum number of half-open IKE SAs to make full use of the device's processing capability without affecting the IKE SA negotiation efficiency.
The supported maximum number of established IKE SAs depends on the device's memory space. Adjust the maximum number of established IKE SAs to make full use of the device's memory space without affecting other applications in the system.
To set the limit on the number of IKE SAs:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Set the maximum number of half-open IKE SAs and the maximum number of established IKE SAs. | ike limit { max-negotiating-sa negotiation-limit | max-sa sa-limit } | By default, there is no limit to the maximum number of IKE SAs. |