H3C S6550X-HI Series Command Reference Manual page 2331

Parameters
: Specifies the IKE SA lifetime in seconds, in the range of 60 to 604800.
seconds
Usage guidelines
Before an IKE SA expires, IKE negotiates a new SA. The new SA takes effect immediately after it is
negotiated. The old IKE SA will be cleared when it expires.
If the communicating peers are configured with different IKE SA lifetime settings, the smaller setting
takes effect.
If the IPsec SA lifetime is also configured, set the IKE SA lifetime longer than the IPsec SA lifetime as
a best practice.
Examples
# Set the IKE SA lifetime to 600 seconds for IKE proposal 1.
<Sysname> system-view
[Sysname] ike proposal 1
[Sysname-ike-proposal-1] sa duration 600
Related commands
display ike proposal
sa soft-duration buffer
Use
sa soft-duration buffer
Use undo sa soft-duration buffer
Syntax
sa soft-duration buffer seconds
undo sa soft-duration buffer
Default
The IKE SA soft lifetime buffer time is not configured.
Views
IKE profile view
Predefined user roles
network-admin
Parameters
: Specifies the IKE SA soft lifetime buffer time, in seconds. The value range is 10 to 36000.
seconds
Usage guidelines
This command takes effect only when IKEv1 is used.
The IKE SA soft lifetime buffer time is used determine the IKE SA soft lifetime. A new IKE SA will be
negotiated when the IKE SA soft lifetime expires.
The IKE SA soft lifetime is calculated as follows: IKE SA soft lifetime = IKE SA lifetime – IKE SA soft
lifetime buffer time.
If the IKE SA soft lifetime buffer time is not configured, the system calculates a default IKE SA soft
lifetime based on the IKE SA lifetime.
The default IKE SA soft lifetime is also used if the IKE soft lifetime calculated based on the soft
lifetime buffer is shorter than or equal to 10 seconds.
to set the IKE SA soft lifetime buffer time.
to restore the default.
37