Configuring Keepalive Timer - 3Com 3C13636 Configuration Manual

3Com Router 3000 Ethernet Family
Configuration Guide
IX. Configuring subnet type of the IKE peer
You can use these two commands only when your router is interoperable with a
Netscreen device.
Perform the following configuration in IKE-peer view:
Table 8-16 Configure subnet type of the IKE peer
Configure subnet type of the local GW
Restore the default subnet type of the
local GW
Configure subnet type of the peer GW
Restore the default subnet type of the
peer GW
The default is single-subnet.

8.2.4 Configuring Keepalive Timer

I. Configuring keepalive interval
Configure time interval for ISAKMP SA to transmit hold packet to the peer.
Perform the following configuration in system view.
Table 8-17 Configure time interval for Keepalive packet transmission
Configure time interval for ISAKMP SA to
transmit Keepalive packet to the peer
Disable the above function
IKE will maintain the ISAKMP SA link state through this packet. Generally, if the peer
has used the ike sa keepalive-timer timeout command to configure timeout time, this
Keepalive interval must be configured on local end. When the peer did not receive this
Keepalive packet within configured timeout time, this ISAKMP SA and its
corresponding IPSec SA will be deleted. Therefore, the configured timeout time should
be longer than Keepalive packet transmission time.
By default, this function is invalid.
II. Configuring keepalive timeout time
Configure timeout time for ISAKMP SA waiting for Keepalive packet.
Perform the following configuration in system view.
Operation
Operation
3Com Corporation
8-11
Chapter 8 IKE Configuration
Command
local { multi-subnet | single-subnet }
undo local
peer { multi-subnet | single-subnet }
undo peer
Command
ike sa keepalive-timer
seconds
undo ike sa keepalive-timer interval
interval