Chapter 40 IPSec VPN
UAG CLI Reference Guide
201
conn-check {IPv4 | FQDN | first-and-last}
method {icmp | tcp} period <5..600>
timeout <1..10> fail-tolerance <1..10>
action {log | no-log} [port <1..65535>]
Turns on the VPN connection check. The UAG can regularly check
the VPN connection to the gateway you specified to make sure it is
still available. You need to specify the gateway’s domain name or
IP address, or the first and last IP addresses in the connection’s
remote policy. Make sure one of these is the peer gateway’s LAN IP
address.
icmp | tcp
: Select how the UAG checks the connection. The peer
must be configured to respond to the method you select.
period <5..600>
: Enter the number of seconds between
connection check attempts.
timeout <1..10>
: Enter the number of seconds to wait for a
response before the attempt is a failure.
fail-tolerance <1..10>
: Enter the number of consecutive
failures allowed before the UAG disconnects the VPN tunnel.
log
: have the UAG generate a log every time it checks this VPN
connection.
port <1..65535>
: Specify the port number to use for a TCP
connectivity check.
crypto map rename
map_name map_name
Renames the specified IPSec SA (first
map_name
) to the specified
name (second
map_name
).
Table 122
crypto Commands: IPSec SAs (continued)
COMMAND
DESCRIPTION
Summary of Contents for UAG Series
Page 5: ...Document Conventions UAG CLI Reference Guide 5 Server Firewall Telephone Switch Router ...
Page 22: ...22 PART I Introduction ...
Page 23: ...23 ...
Page 41: ...41 PART II Reference ...
Page 42: ...42 ...
