3Com 3C13636 Configuration Manual page 1277

3Com Router 3000 Ethernet Family
Configuration Guide
VI. Configuring the session request interval
If a session is not successfully established, the initiator sends a request again to try to
establish the session after a specified interval. If three successive session
establishment attempts end up with failure, the initiator concludes that the session
cannot be established.
Perform the following configuration in a DVPN policy view.
Table 4-30 Configure the session request interval
Configure the session request interval
Restore the default session request
interval
The default session request interval is 10 seconds.
VII. Configuring the IPSec algorithm suite
Data packets transmitted in a DVPN domain are IPSec-encrypted for security. At
present, the supported encryption algorithms include DES, 3DES, and AES, and the
supported authentication algorithms are MD5 and SHA1. Use the following commands
to specify the algorithm suite for the IPSec SA to use for forwarding packets.
Perform the following configuration in DVPN policy view.
Table 4-31 Configure the IPSec algorithm suite
Configure the IPSec algorithm suite
Restore the default IPSec algorithm
suite
The algorithm suite 1 for data packets are used by default, which comprises encryption
algorithm DES and authentication algorithm MD5.
VIII. Configuring the lifetime of the IPSec SA
The lifetime of the IPSec SA used to encrypt data packets is part of the DVPN policy.
Perform the following configuration in DVPN policy view.
Table 4-32 Configure the lifetime of the IPSec SA
Configure the lifetime of the IPSec SA
Operation
Operation
Operation
3Com Corporation
4-23
Command
session setup-interval time-interval
undo session setup-interval
Command
data algorithm-suite suite-number
undo data algorithm-suite
Command
data ipsec-sa duration time-base
time-interval
Chapter 4 DVPN