3-30 Command Line Interface Commands Referencecp { name | index } ipsec dead-peer-detection { yes | no }show cp { name | index } ipsec dead-peer-detectionno cp { name | index } ipsec dead-peer-detectionThese commands set, display, or disable the status of dead peer detection for the specified IPsec Phase 2profile. Dead peer detection counts the outbound packets on a tunnel. If 256 packets go out without a singlepacket coming in, the tunnel SAs are expired and a rekey is started. Rekeying is first attempted on the previousPhase 1 SA. If the Phase 1 request times out, then the Phase 1 SA is expired and Phase 1 rekeying is begunover again.cp { name | index } ipsec dead-peer-detection ping-address remote_net_IPv4_addressshow cp { name | index } ipsec dead-peer-detection ping-addressNote: These commands are supported beginning with firmware version 8.2These commands allow you to specify or show what IP destination host address is used to verify whether or notpeer is dead. The IP address must belong to a tunnel’s remote network (which can be configured as a subnet,an address range, or an individual host in the IP options menu). The subnet remote network case also disallowsthe host part of the address to be all ones or all zeroes. For example, it is not permitted to set the address to163.176.0.0 or 163.176.255.255 in a class B network.cp { name | index } ipsec dead-peer-detection ping-retry 1..65535show cp { name | index } ipsec dead-peer-detection ping-retryNote: These commands are supported beginning with firmware version 8.2These commands allow you to specify or show the retry interval between successive pings (in seconds).Default is 5 seconds.IKE/IPSec Connection Profile Commandscp { name | index } ipsec ip[remote[members {a.b.c.d | a.b.c.d/n | a.b.c.d e.f.g.h | a.b.c.d-e.f.g.h}][tep a.b.c.d] ][local[members {a.b.c.d | a.b.c.d/n | a.b.c.d e.f.g.h | a.b.c.d-e.f.g.h}][tep a.b.c.d] ][via a.b.c.d]show cp { name | index } ipsec ipcp { name | index } ipsec sa lifetime { seconds | kbytes } { non-negative-integer | none }show cp { name | index } ipsec sa lifetime [ { seconds | kbytes } ]no cp { name | index } ipsec sa lifetime [ { seconds | kbytes } ]
