Filter
Top Products
1746 CHAPTER 102: DVPN TUNNEL CONFIGURATION COMMANDS
string of 1 to 15 characters. &<1-6> means that you can specify the argument for
up to 6 times.
Description Use the
ipsec profile command to configure to reference an IPSec profile on a
DVPN tunnel interface.
Use the
undo ipsec profile command to cancel the reference of an IPSec profile
on a DVPN tunnel interface.
By default, no IPSec profile exists. That is, DVPN tunnels are not protected.
Note that:
IPSec profiles are applicable only for the interfaces of DVPN-type tunnels.
A DVPN tunnel interface can reference only one IPSec profile.
You need cancel the currently referenced IPSec profile on a DVPN tunnel interface
before referencing a new one.
Related command: ipsec profile (system view) and interface tunnel on page 884.
Example # Specify to reference IPSec profile dvpnprofile on DVPN tunnel interface Tunnel0
to protect the DVPN tunnel.
<Sysname> system-view
[Sysname] interface tunnel 0
[Sysname-Tunnel0] tunnel-protocol dvpn udp
[Sysname-Tunnel0] ipsec profile dvpnprofile
keepalive
Syntax keepalive [ seconds [ times ]]
undo keepalive
View Tunnel interface view
Parameter seconds: Interval in seconds for transmitting keepalive packets, in the range 1 to
32,767. The default value is 10.
times: Maximum number of attempts for transmitting a keepalive packet, in the
range 1 to 255. The default value is 3.
Description Use the
keepalive command to set the keepalive interval and the maximum
number of attempts for transmitting a keepalive packet.
When the tunneling mode is DVPN, use the undo keepalive command to restore
the default.
The command does not allow the Keepalive timer to be triggered immediately
until DVPN sessions are set up successfully.