H3C S6550X-HI Series Command Reference Manual page 2273

Parameters
inbound inbound-interval
lower bound value of the IPsec anti-replay window to the standby device. This interval is expressed
in the number of received packets, in the range of 0 to 1000. If you set the value to 0, the lower bound
value of the anti-replay window will not be synchronized.
outbound outbound-interval
the IPsec anti-replay sequence number to the standby device. This interval is expressed in the
number of sent packets, in the range of 1000 to 100000.
Usage guidelines
The intervals take effect only after you enable IPsec redundancy by using the
command.
enable
A short interval improves the anti-replay information consistency between the active device and the
standby device, but it sacrifices the forwarding performance of the devices.
Examples
# Set the anti-replay window lower bound value synchronization interval for inbound packets to 800.
Set the sequence number synchronization interval for outbound packets to 50000.
<Sysname> system-view
[ ]
Sysname
[
sysname-ipsec-policy-manual-test-1
50000
Related commands
ipsec anti-replay check
ipsec anti-replay window
ipsec redundancy enable
remote-address
Use
remote-address
Use
undo remote-address
Syntax
remote-address { [ ipv6 ] host-name | ipv4-address | ipv6 ipv6-address }
undo remote-address
Default
No remote IP address is configured for the IPsec tunnel.
Views
IPsec policy view
IPsec policy template view
Predefined user roles
network-admin
Parameters
: Specifies the remote address or host name of an IPv6 IPsec tunnel. To specify the remote
ipv6
address or host name of an IPv4 IPsec tunnel, do not specify this keyword.
: Specifies the interval at which the active device synchronizes the
ipsec policy test 1 manual
to configure the remote IP address for the IPsec tunnel.
to restore the default.
: Specifies the interval at which the active device synchronizes
]
redundancy replay-interval inbound 800 outbound
48
ipsec redundancy