Ike Sa Keepalive-Timer Interval - HPE FlexNetwork HSR6800 Security Command Reference

Use undo ike proposal to delete an IKE proposal.
Syntax
ike proposal proposal-number
undo ike proposal proposal-number
Views
System view
Default command level
2: System level
Parameters
proposal-number: Specifies the IKE proposal number in the range of 1 to 65535. The lower the
number, the higher the priority of the IKE proposal. During IKE negotiation, a high priority IKE
proposal is matched before a low priority IKE proposal.
Usage guidelines
The system provides a default IKE proposal, which has the lowest priority. The following table shows
the default settings for the default IKE proposal in non-FIPS mode and FIPS mode:
Setting
Encryption algorithm
Authentication
algorithm
Authentication
method
DH group
SA lifetime
Examples
# Create IKE proposal 10 and enter IKE proposal view.
<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10]
Related commands
display ike proposal

ike sa keepalive-timer interval

Use ike sa keepalive-timer interval to set the ISAKMP SA keepalive interval.
Use undo ike sa keepalive-timer interval to disable the ISAKMP SA keepalive transmission
function.
Syntax
ike sa keepalive-timer interval seconds
undo ike sa keepalive-timer interval
Default
No keepalive packet is sent.
Non-FIPS mode
DES-CBC
HMAC-SHA1
Pre-shared key
MODP_768
86400 seconds
317
FIPS mode
AES_CBC_128
SHA
Pre-shared key
MODP_1024
86400 seconds