Allied Telesis AR2050V, Справочник по командам, Страница: 2781 / 2824

C613-50186-01 Rev B Command Reference for AR2050V 2781
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
O
PEN
VPN C
OMMANDS
TUNNEL OPENVPN EXPIRY
-
SECONDS
tunnel openvpn expiry-seconds
Overview Use this command to change when client keys are renegotiated. By default, client
keys are renegotiated after an hour; you can use this command to turn off
renegotiation or to change that time period.
Use the no variant of this command to return to the default of 1 hour.
Syntax
tunnel openvpn expiry-seconds < 0-4294967295 >
no tunnel openvpn expiry-seconds
Default 3600 seconds (1 hour).
Mode Interface mode for a tunnel
Example To configure tunnel2 to rekey every 30 minutes, use the following commands:
awplus# configure terminal
awplus(config)# interface tunnel2
awplus(config-if)# tunnel openvpn expiry-seconds 1800
To return tunnel2 to the default of rekeying hourly, use the following commands:
awplus# configure terminal
awplus(config)# interface tunnel2
awplus(config-if)# no tunnel openvpn expiry-seconds
Related
Commands
tunnel openvpn expiry-bytes
Command
changes
Version 5.4.7-0.1: command added
Parameter Description
expiry-seconds
<
0-4294967295 >
The length of time after which the firewall renegotiates client
keys. A value of 0 seconds means that keys are not
renegotiated after the VPN is formed. Otherwise, setting the
expiry-seconds to a non-zero timer value will cause a rekey
when that time is exceeded.