ipsec sa hrp-consistency-check enable

Function

The ipsec sa hrp-consistency-check enable command enables consistency check and backup of IPSec SA in hot standby.

The undo ipsec sa hrp-consistency-check enable command disables consistency check and backup of IPSec SA in hot standby.

By default, consistency check and backup of IPSec SA in hot standby are enabled.

The virtual system does not support this command.

Format

ipsec sa hrp-consistency-check enable

undo ipsec sa hrp-consistency-check enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

In hot standby, the backup information may be lost during transmission, leading to inconsistency of IPSec SA data on active and standby devices.

After consistency check and backup are enabled, the standby device checks whether the tunnel IPSec SA exists when receiving the backup information about the tunnel packet sequence number. If not, the standby device sends a request to the active device for IPSec SA backup.

Example

# Enable consistency check and backup of IPSec SA.

<sysname> system-view
[sysname] ipsec sa hrp-consistency-check enable