Allied Telesis AR2050V, Справочник по командам, Страница: 2780 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2780
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
O
PEN
VPN C
OMMANDS
TUNNEL OPENVPN EXPIRY
-
BYTES
tunnel openvpn expiry-bytes
Overview Use this command to change how the firewall decides when to renegotiate client
keys. By default, client keys are renegotiated after an hour; you can use this
command to base rekeying on data usage instead of time.
Use the no variant of this command to return to time-based rekeying instead.
Syntax
tunnel openvpn expiry-bytes < 0-4294967295 >
no tunnel openvpn expiry-bytes
Default Not configured - the firewall renegotiates keys every hour instead.
Mode Interface mode for a tunnel
Example To configure tunnel2 to rekey after 1Gbyte of traffic, use the following commands:
awplus# configure terminal
awplus(config)# interface tunnel2
awplus(config-if)# tunnel openvpn expiry-bytes 1000000000
To return tunnel2 to the default of rekeying hourly, use the following commands:
awplus# configure terminal
awplus(config)# interface tunnel2
awplus(config-if)# no tunnel openvpn expiry-bytes
Related
Commands
tunnel openvpn expiry-seconds
Command
changes
Version 5.4.7-0.1: command added
Parameter Description
expiry-bytes
<
0-4294967295 >
The number of bytes of traffic after which the firewall
renegotiates client keys. A value of 0 bytes means that keys
are not renegotiated after the VPN is formed. Otherwise,
setting the expiry-bytes to a non-zero value will cause a rekey
when the firewall has received that many bytes of traffic.