No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

IPSEC IKE SA of USG series firewall How to keep alive in no stream situation

Publication Date:  2012-09-22 Views:  4 Downloads:  0

Issue Description

IPSEC SA of Firewall in no stream situation,exceed the time of ipsec sa global-duration time-based XXX,IPSEC IKE SA will be backout,well then how to keep alive in no stream situation?

Alarm Information

none

Handling Process

ike sa keepalive-timer interval 30
ike sa keepalive-timer timeout 90
Use these 2 commands:
ike sa keepalive-timer interval be used configure interval of sent Keepalive by ISAKMP SA,default no application
ike sa keepalive-timer timeout be used configure interval of waiting for sent Keepalive by ISAKMP SA,default no application
for example
ike sa keepalive-timer interval 30
ike sa keepalive-timer timeout 90

Root Cause

none

Suggestions

none

END