•
•
•
Step Description Command Keys
36 Set VPN activation mode. esr(config-ipsec-vpn)# ike
establish-tunnel <MODE>
<MODE> – VPN activation
mode:
by-request – connection
is enabled by an
opposing party;
route – connection is
enabled when there is
traffic routed to the
tunnel;
immediate – tunnel is
enabled automatically
after applying the
configuration.
37 Bind IKE gateway to IPsec VPN. esr(config-ipsec-vpn)# ike
gateway <NAME>
<NAME> – IKE gateway name,
set by the string of up to 31
characters.
38 Set the time interval value in seconds
after which the connection is closed, if
no packet has been received or sent via
SA (optionally).
esr(config-ipsec-vpn)# ike idle-
time <TIME>
<TIME> – interval in seconds,
takes values of [4..86400].
39 Disable key re-approval before the IKE
connection is lost due to the timeout,
the number of transmitted packets or
bytes (optionally).
esr(config-ipsec-vpn)# ike rekey
disable