No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

IPSEC IKE SA of USG series firewall How to keep alive in no stream situation

Publication Date:  2012-09-22 Views:  4 Downloads:  0
Issue Description
IPSEC SA of Firewall in no stream situation,exceed the time of ipsec sa global-duration time-based XXX,IPSEC IKE SA will be backout,well then how to keep alive in no stream situation?
Alarm Information
none
Handling Process
ike sa keepalive-timer interval 30
ike sa keepalive-timer timeout 90
Use these 2 commands:
ike sa keepalive-timer interval be used configure interval of sent Keepalive by ISAKMP SA,default no application
ike sa keepalive-timer timeout be used configure interval of waiting for sent Keepalive by ISAKMP SA,default no application
for example
ike sa keepalive-timer interval 30
ike sa keepalive-timer timeout 90

Root Cause
none
Suggestions
none

END