ipsec ikerekey on|off|force

Enable automatic renegotiation of expired phase1 when there are non-dying phase2 SAs. Possible values are:

force Rekeying is done unconditionally.
on Rekeying is done only if DPD monitoring is active. (Default)
off No automatic rekeying. Note that turning off automatic rekeying will result in inaccurate DPD monitoring.

Examples:

  1. Force IPsec DPD rekeying :
    cmd ipsec ikerekey force

See also: IPsec

Last modified 7 years ago Last modified on 12-12-20 10:44:25 AM