ELTEX ESR-1511 - Page 193

ESR series service routers.ESR-Series. User manual
193
•
•
Step Description Command Keys
40 Configure the start of IKE connection
keys re-approval before the expiration
of the lifetime (optional).
esr(config-ipsec-vpn)# ike rekey
margin { seconds <SEC> |
packets <PACKETS> | kilobytes
<KB> }
<SEC> – time interval in
seconds remaining before the
connection release (set by the
lifetimeseconds command,
see 22.2.13). Takes values in
the range of [4..86400].
<PACKETS> – number of
packets remaining before the
connection release (set by the
lifetimepackets command).
Takes values in the range of
[4..86400].
<KB> – traffic volume in
kilobytes remaining before the
connection release (set by the
lifetimekilobytes command).
Takes values in the range of
[4..86400].
Default value:
Keys re-approval before
the expire of time – 540
seconds before.
Keys re-approval before
the expire of traffic
volume and amount of
packets – disabled.
41 Set the level of margin seconds, margin
packets, margin kilobytes values
random spread (optional).
esr(config-ipsec-vpn)# ike rekey
randomization <VALUE>
<VALUE> – maximum ratio of
values spread, takes values of
[1..100].
Default value: 100%
42 Specify the description for IPsec-VPN
(optional).
esr(config-ipsec-vpn)# description
<DESCRIPTION>
<DESCRIPTION> – profile
description, set by the string of
up to 255 characters.
43 Enable IPsec VPN. esr(config-ipsec-vpn)# enable