Well, as part of this lab challenge,
we want to make sure we can do all of these timer configurations,
not only via CLI,
but also via the graphical user interface.
Now, most of these questions are straightforward,
but a couple of them were a little tricky.
I want to go ahead and take the time to review
the solution just to make sure
that we got all of the parameters down.
We should look at a description of an effect like,
hey, only send updates every 10 seconds,
and know that we're talking about the advertisement interval.
So first of all, how do we go about configuring timers?
Well, we do a config-t,
get onto the SD-WAN side of the house,
get into OMP section, and then timers.
So, you know, not too bad,
but still requires us to know how to get there.
And again, the first directive
is to set an advertisement interval of 10.
So that's the first one.
Now, next, it's asking about this weird situation
where a vSmart or an SD-WAN controller comes back online
and maybe has missing routes.
We want to make sure they're removed after 10 minutes.
Well, when we're talking about that,
we are talking about the EOR timer.
The EOR timer defaults to five minutes.
We're told to do it every 10 minutes.
And again, everything is in seconds.
So we're going to configure 600 seconds
to represent 10 minutes.
Now, next is the fun one.
We're told to set keepalives to be every 60 seconds.
Well, there's no keepalive timer.
There's nothing in here that's going to allow me
to directly tune the keepalive.
So how do we tune the keepalive?
Using the hold time,
because the keepalive is based on 1 3rd of the hold time.
So I can set the hold time to be 180,
and that will indirectly set the keepalives to be 60 seconds.
Now, next question,
it's saying to set the graceful restart timer
to a single day,
and then we need to tune IPsec
so the tunnels aren't torn down.
So this is, you know, we spent quite a bit of time
making sure we understand how IPsec rekey timer
is directly related to the graceful restart timer.
It must always be a two to one ratio.
And so I'm going to set the graceful restart timer.
And again, we're told to do this in a day.
Well, what's a day?
It's 86,400 seconds.
Might've had to bust out a calculator for that,
but, you know, I mean, it's also a number we can memorize.
And so then I'm going to exit out of the timers
and OMP configuration and get into the security config
and then IPsec.
And now I can set my rekey timer to be double the 86,400,
and that number should be 172,800.
So at this point, if I commit,
then it should take it, no problem.
Now the graphical user interface version
is going to be setting all the exact same timers
via the OMP feature template,
as well as potentially, not potentially,
but the Cisco security feature template
for the IPsec rekey timer.
Mostly, we just want to make sure that we understand
how to interpret timers
and how to go about configuring those timers in seconds
based on whatever it is that we want to do.
If we want our graceful restart time to be three days,
we need to translate that into seconds
and we need to make sure we set the rekey timer as well.
I hope this has been informative for you
and I'd like to thank you for viewing.