VPN
Issue 1 January 2008
1213
Example
To set the IKE phase 2 SA lifetime to 300 seconds
G450-001(config-transform:ts1)# set security-association lifetime seconds 300
Related Commands
show crypto ipsec transform-set
crypto isakmp invalid-spi-recovery
Use the
crypto isakmp invalid-spi-recovery
command to enable invalid SPI
recovery (default setting). Use the
no
form of the command to disable invalid SPI recovery.
Syntax
[no] crypto isakmp invalid-spi-recovery
User Level
read-write
Context
general
Example
To enable invalid SPI recovery:
G450-001(super)# no crypto isakmp invalid-spi-recovery
Related Commands
crypto isakmp nat keepalive
NAT Traversal keepalive is enabled in the device by default. Use the
crypto isakmp nat
keepalive
command to re-enable NAT Traversal keepalive if it was disabled, and configure
the keepalive interval. The purpose of this command is to keep the NAT devices tables updated.
Use the
no
form of the command to disable NAT Traversal keepalives.
Tip:
Tip:
Set the NAT Traversal keepalive interval to be less than the NAT translation aging
time on the NAT device.
Summary of Contents for G450 Manager
Page 1: ...Avaya G450 CLI Reference 03 602056 Issue 1 January 2008 ...
Page 32: ...Contents 32 Avaya G450 CLI Reference ...
Page 38: ...About this Book 38 Avaya G450 CLI Reference ...
Page 154: ...Roadmap 154 Avaya G450 CLI Reference ...
Page 1304: ...CLI Commands WFVQ Weighted Fair VoIP Queueing 1304 Avaya G450 CLI Reference ...