Statement introduced in Junos OS Release 17.1 on MX Series.
For an IKE ALG application, configure the ESP session (IPsec data traffic) idle timeout. If no IPsec data traffic is passed on the ESP session in this time, the session is deleted.
The IKE ALG enables the passing of IKEv1 and IPsec packets through NAPT-44 and NAT64 rules between IPsec peers that are not NAT-T compliant.
Default: 800 seconds
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.