Rekey Acl - HPE FlexNetwork HSR6800 Security Command Reference

Default
The retransmission interval is 10 seconds, and the maximum number of retransmissions is 2.
Views
GDOI KS group view
Default command level
2: System level
Parameters
interval interval: Specifies the redundancy protocol packet retransmission interval in the range of 10
to 60 seconds.
number number: Specifies the maximum number of retransmissions, in the range of 2 to 5.
Usage guidelines
During KS election and data exchange, the local KS sends redundancy protocol packets (expect
hello packets) to peer KSs. If the local KS does not receive a response from a peer KS within the
retransmission interval, the local KS retransmits the packets to the peer KS. If the maximum number
of retransmissions is exceeded, the local KS sets the peer KS state to Down. Packets to be
retransmitted include priority requests, main advertisement packets, data mergence packets, data
updates, and data synchronization packets.
On a not-so-good network, you can increase the retransmission interval or retransmission number to
avoid KS split. If a KS loses contact with the primary KS, it will split from the KS group and elect itself
as the primary KS. Then, the KS group might have multiple primary KSs.
Examples
# Set the redundancy protocol packets retransmission interval to 30 seconds, and the maximum
number of retransmissions to 3.
<Sysname> system-view
[Sysname] gdoi ks group abc
[Sysname-gdoi-ks-group-abc] redundancy retransmit interval 30 number 3
Related commands
display gdoi ks

rekey acl

Use rekey acl to specify the rekey ACL, which specifies the source and destination addresses for
multicast rekey messages.
Use undo rekey acl to remove the rekey ACL.
Syntax
rekey acl { access-list-number | name access-list-name }
undo rekey acl
Default
No source or destination address is specified for multicast rekey messages.
Views
GDOI KS group view
Default command level
2: System level
493