Disabling Next Payload Field Checking; Displaying And Maintaining Ike - 3Com MSR 50 Series Configuration Manual

1908 C 101: IKE C
HAPTER
Disabling Next
Payload Field
Checking
Displaying and
Maintaining IKE
ONFIGURATION
The difference between DPD and keepalive is that keepalive sends query
■
packets periodically, whereas DPD sends a query packet only when an
encrypted packet is to be sent and the DPD query triggering interval expires.
Following these steps to configure a DPD:
To do...
Enter system view
Create a DPD and enter its
view
Set the DPD query triggering
interval
Set the DPD packet
retransmission interval
The Next payload field is in the generic payload header of the last payload of the
IKE negotiation message (comprising multiple payloads). According to the
protocol, this field must be 0 if the payload is the last payload of the packet.
However, it may be set to other values on some brands of devices. For
interoperability, you can disable the checking of this field.
Following these steps to disable Next payload field checking:
To do...
Enter system view
Disable Next payload field checking
for the last payload of an IKE
message
To do...
Display IKE DPD
information
Display IKE peer
information
Display IKE SA
information
Display IKE proposal
information
Clear SAs established by
IKE
Use the command...
system-view
ike dpd dpd-name
interval-time interval-time
time-out time-out
Use the command...
system-view
ike next-payload check
disabled
Use the command...
display ike dpd [ dpd-name ]
display ike peer [ peer-name ]
display ike sa [ verbose [ connection-id
connection-id | remote-address
remote-address ] ]
display ike proposal
reset ike sa [ connection-id ]
Remarks
-
Required
Optional
10 seconds by default
Optional
5 seconds by default
Remark
-
Required
Enabled by default
Remarks
Available in any view
Available in any view
Available in any view
Available in any view
Available in user
view