69
gtk-rekey method
Use gtk-rekey method to set a GTK update method.
Use undo gtk-rekey method to restore the default.
Syntax
gtk-rekey method { packet-based [ packet ] | time-based [ time ] }
undo gtk-rekey method
Default
The GTK is updated at an interval of 86400 seconds.
Views
WLAN service template view
Predefined user roles
network-admin
Parameters
packet-based packet: Specifies the number of packets (including multicasts and broadcasts) that
are transmitted before the GTK is updated. The value range for the packet argument is 5000 to
4294967295 and the default is 10000000.
time-based time: Specifies the interval at which the GTK is updated. The value range for the time
argument is 180 to 604800 seconds and the default is 86400 seconds.
Usage guidelines
Set the GTK update method only when GTK update is enabled.
The most recent configuration overwrites the previous one. For example, if you set the packet-based
method and then set the time-based method, the time-based method takes effect.
If you set the GTK update method after the service template is enabled, the change takes effect
when the following conditions exist:
• If you change the GTK update interval, the new interval takes effect when the old timer times
out.
• If you change the packet number threshold, the new threshold takes effect immediately.
• If you change the GTK update method to packet-based, the new method takes effect when the
timer is deleted and the packet number threshold is reached.
• If you change the GTK update method to time-based, the configuration takes effect
immediately.
Examples
# Enable time-based GTK update.
<Sysname> system-view
[Sysname] wlan service-template security
[Sysname-wlan-st-security] gtk-rekey method time-based 3600
# Enable packet-based GTK update.
<Sysname> system-view
[Sysname] wlan service-template security
[Sysname-wlan-st-security] gtk-rekey method packet-based 600000
Related commands
gtk-rekey enable