Ike Nat-Keepalive - HP FlexFabric 7900 Series Command Reference Manual

Security
Hide thumbs Also See for FlexFabric 7900 Series:
Table of Contents

Advertisement

Use undo ike limit to restore the default.
Syntax
ike limit { max-negotiating-sa negotiation-limit | max-sa sa-limit }
undo ike limit { max-negotiating-sa | max-sa }
Default
There is no limit to the maximum number of IKE SAs.
Views
System view
Predefined user roles
network-admin
Parameters
max-negotiating-sa negotiation-limit: Specifies the maximum number of half-open IKE SAs, in the range
of 1 to 99999.
max-sa sa-limit: Specifies the maximum number of established IKE SAs, in the range of 1 to 99999.
Usage guidelines
The supported maximum number of half-open IKE SAs depends on the device's processing capability.
Adjust the maximum number of half-open IKE SAs to make full use of the device's processing capability
without affecting the IKE SA negotiation efficiency.
The supported maximum number of established IKE SAs depends on the device's memory space. Adjust
the maximum number of established IKE SAs to make full use of the device's memory space without
affecting other applications in the system.
Examples
# Set the maximum number of half-open IKE SAs to 200.
<Sysname> system-view
[Sysname] ike limit max-negotiating-sa 200
# Set the maximum number of established IKE SAs to 200.
<Sysname> system-view
[Sysname] ike limit max-sa 5000

ike nat-keepalive

Use ike nat-keepalive to set the NAT keepalive interval.
Use undo ike nat-keepalive to restore the default.
Syntax
ike nat-keepalive seconds
undo ike nat-keepalive
Default
The NAT keepalive interval is 20 seconds.
Views
System view
164

Advertisement

Table of Contents
loading

Table of Contents