H3C S6550X-HI Series Command Reference Manual page 2314

Predefined user roles
network-admin
Parameters
: Specifies the number of seconds between IKE keepalives, in the range of 20 to 28800.
interval
Usage guidelines
To detect the status of the peer, configure IKE DPD instead of the IKE keepalive feature, unless IKE
DPD is not supported on the peer.
The keepalive timeout time configured at the local must be longer than the keepalive interval
configured at the peer. Because more than three consecutive packets are rarely lost on a network,
you can set the keepalive timeout time to three times as long as the keepalive interval.
Examples
# Set the keepalive interval to 200 seconds
<Sysname> system-view
[Sysname] ike keepalive interval 200
Related commands
ike keepalive timeout
ike keepalive timeout
Use
ike keepalive timeout
Use
undo ike keepalive timeout
Syntax
ike keepalive timeout seconds
undo ike keepalive timeout
Default
The IKE keepalive timeout time is not set.
Views
System view
Predefined user roles
network-admin
Parameters
: Specifies the number of seconds between IKE keepalives. The value range for this
seconds
argument is 20 to 28800.
Usage guidelines
If the local end receives no keepalive packets from the peer during the timeout time, the IKE SA is
deleted along with the IPsec SAs it negotiated.
The keepalive timeout time configured at the local end must be longer than the keepalive interval
configured at the peer. Because more than three consecutive packets are rarely lost on a network,
you can set the keepalive timeout time to three times as long as the keepalive interval.
Examples
# Set the keepalive timeout time to 20 seconds.
<Sysname> system-view
to set the IKE keepalive timeout time.
to restore the default.
20