H3C S6550X-HI Series Command Reference Manual page 2308

Predefined user roles
network-admin
Parameters
interval interval
retry seconds
seconds.
on-demand
has not received any IPsec packets from the peer for the specified interval.
periodic
Usage guidelines
DPD is triggered periodically or on-demand. As a best practice, use the on-demand mode when the
device communicates with a large number of IKE peers. For an earlier detection of dead peers, use
the periodic triggering mode, which consumes more bandwidth and CPU.
When DPD settings are configured in both IKE profile view and system view, the DPD settings in IKE
profile view apply. If DPD is not configured in IKE profile view, the DPD settings in system view apply.
It is a good practice to set the triggering interval longer than the retry interval so that a DPD detection
does not occur during a DPD retry.
Examples
# Configure DPD to be triggered every 10 seconds and every 5 seconds between retries if the peer
does not respond.
<Sysname> system-view
[Sysname] ike profile 1
[Sysname-ike-profile-1] dpd interval 10 retry 5 on-demand
Related commands
ike dpd
encryption-algorithm
Use
encryption-algorithm
Use undo encryption-algorithm
Syntax
encryption-algorithm { 3des-cbc | aes-cbc-128 | aes-cbc-192 | aes-cbc-256 |
des-cbc }
undo encryption-algorithm
Default
An IKE proposal uses the 56-bit DES encryption algorithm in CBC mode.
Views
IKE proposal view
Predefined user roles
network-admin
Parameters
3des-cbc
encryption.
: Specifies a DPD triggering interval in the range of 1 to 300 seconds.
: Specifies the DPD retry interval in the range of 1 to 60 seconds. The default is 5
: Triggers DPD on demand. The device triggers DPD if it has IPsec traffic to send and
: Triggers DPD at regular intervals. The device triggers DPD at the specified interval.
: Specifies the 3DES algorithm in CBC mode. The 3DES algorithm uses a 168-bit key for
to specify an encryption algorithm for an IKE proposal.
to restore the default.
14