ike call admission limit in-negotiation-sa

Function

The ike call admission limit in-negotiation-sa command specifies the maximum number of IKE SAs waiting in a queue.

The undo ike call admission limit in-negotiation-sa command restores the default maximum number of IKE SAs waiting in a queue.

By default, the maximum number of IKE SAs waiting in a queue is 800 on a CPU.

The virtual system does not support this command.

ike call admission limit in-negotiation-sa limit-value

undo ike call admission limit in-negotiation-sa

Parameter	Description	Value
limit-value	Specifies the maximum number of IKE SAs waiting in a queue.	The value is an integer that ranges from 1 to 800.

System view

2: Configuration level

You can run this command to set the maximum number of IKE SAs waiting in a queue to defend against DOS attacks.

# Set the maximum number of IKE SAs waiting in a queue to 100.

<sysname> system-view
[sysname] ike call admission limit in-negotiation-sa 100