Juniper Networks - What does 'set ike member-sa-hold-time' do?

What does 'set ike member-sa-hold-time' do?

Knowledge Base ID:	KB6762
Version:	2.0
Published:	07 Oct 2008
Updated:	07 Oct 2008
Categories:	NS-5GT NS-5XP NS-5XT NS-25 NS-50 NS-204 NS-208 NS-5200 NS-5400 ScreenOS

Summary:

What does 'set ike member-sa-hold-time' do?

Problem or Goal:

set ike member-sa-hold-time

Solution:

This solution applies to ScreenOS 3.0.3 and higher.

The set ike member_sa_hold_time command is used to set the length of time (in minutes) in which a NetScreen device will keep an unused SA allocated for a dial-up user. The minimum length of time allowed is 3 minutes; the default time is 60 minutes.

In ScreenOS 4.0.0, the syntax was changed to set ike member-sa-hold-time.To determine the current SA hold time, enter the following command:

get ike member-sa-hold-time

Purpose:

Installation