ADTRAN 1000R Series User Manual

Page 1237

Advertising
background image

Command Reference Guide

Crypto Map IKE Command Set

61200510L1-35E

Copyright © 2005 ADTRAN

1237

set security-association lifetime [kilobytes | seconds] <value>

Use the set security-association lifetime command to define the lifetime (in kilobytes and/or seconds) of
the IPSec SAs created by this crypto map.

Syntax Description

kilobytes <value>

Specifies the SA lifetime limit in kilobytes.

seconds <value>

Specifies the SA lifetime limit in seconds.

Default Values

By default, the security-association lifetime is set to 28,800 seconds and there is no default for the
kilobytes lifetime.

Applicable Platforms

This command applies to the NetVanta 300, 1000R, 2000, 3000, 4000, and 5000 and Total Access 900
Series units.

Command History

Release 4.1

Command was introduced.

Functional Notes

Values can be entered for this command in both kilobytes and seconds. Whichever limit is reached first will
end the security association.

Usage Examples

The following example sets the SA lifetime to 300 kilobytes and 2 hours:

(config-crypto-map)#set security-association lifetime kilobytes 300

(config-crypto-map)#set security-association lifetime seconds

7200

Advertising