H3C S6550X-HI Series Command Reference Manual page 2284

sa idle-time
Use
sa idle-time
idle timeout interval, the IPsec SA is deleted.
Use
undo sa idle-time
Syntax
sa idle-time seconds
undo sa idle-time
Default
An IPsec policy, IPsec profile, or IPsec policy template uses the global IPsec SA idle timeout.
Views
IPsec policy view
IPsec policy template view
IPsec profile view
Predefined user roles
network-admin
Parameters
: Specifies the IPsec SA idle timeout in the range of 60 to 86400 seconds.
seconds
Usage guidelines
This feature applies only to IPsec SAs negotiated by IKE and takes effect after the
idle-time
The IPsec SA idle timeout configured by this command takes precedence over the global IPsec SA
timeout configured by the
IPsec policy template is not configured with the SA idle timeout, IKE uses the global SA idle timeout.
Examples
# Set the IPsec SA idle timeout to 600 seconds for IPsec policy map.
<Sysname> system-view
[ ]
Sysname
[
Sysname-ipsec-policy-isakmp-map-100
Related commands
display ipsec sa
ipsec sa idle-time
sa soft-duration buffer
Use
sa soft-duration buffer
buffer.
Use
undo sa soft-duration buffer
Syntax
sa soft-duration buffer { time-based seconds | traffic-based kilobytes }
undo sa soft-duration buffer { time-based | traffic-based }
to set the IPsec SA idle timeout. If no traffic matches an IPsec SA within the
to restore the default.
command is configured.
ipsec sa idle-time
ipsec policy map 100 isakmp
command. If the IPsec policy, IPsec profile, or
]
sa idle-time 600
to set the time-based or traffic-based IPsec SA soft lifetime
to restore the default.
59
ipsec sa