The ike heartbeat-timer timeout command sets the timeout interval during which an IKE SA waits for a heartbeat packet.
The undo ike heartbeat-timer timeout command cancels the configuration.
By default, the timeout interval during which an IKE SA waits for a heartbeat packet is not configured.
Parameter |
Description |
Value |
---|---|---|
seconds |
Specifies the timeout interval during which an IKE SA waits for a heartbeat packet. |
The value is an integer that ranges from 30 to 28800, in seconds. |
Usage Scenario
After heartbeat detection is enabled, the local end periodically sends detection packets to the remote end. If the remote end does not receive packets after the heartbeat timer expires, the remote end considers the local end faulty. IKE can send heartbeat packets to detect IKE peer faults and maintain the IKE SA link status. This command sets the timeout interval during which an IKE SA waits for a heartbeat packet.
Precautions
When the ike heartbeat-timer interval command is configured at one end, the ike heartbeat-timer timeout command must be used at the other end.
The timeout interval of heartbeat packets must be longer than the interval at which heartbeat packets are sent. On a network, packet loss seldom occurs more than three consecutive times. Therefore, it is recommended that the timeout interval of heartbeat packets be three times the interval at which heartbeat packets are sent.