Table of Contents
Advertisement
Implementing IPSec Network Security on Cisco IOS XR Software
Setting Global Lifetimes for IPSec Security Associations
This task sets global lifetimes for IPSec security associations.
SUMMARY STEPS
1.
2.
3.
4.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
crypto ipsec security-association lifetime
{seconds seconds | kilobytes kilobytes }
Example:
RP/0/RP0/CPU0:router(config)# crypto ipsec
security-association lifetime seconds 2700
configure
crypto ipsec security-association lifetime {seconds seconds | kilobytes kilobytes}
end
or
commit
clear crypto ipsec sa {sa-id | all}
How to Implement General IPSec Configurations for IPSec Networks
Purpose
Enters global configuration mode.
Changes global lifetime values used when negotiating
IPSec SAs.
The seconds seconds keyword and argument change
•
the global "timed" lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified number of seconds have passed.
The kilobytes kilobytes keyword and argument change
•
the global "traffic-volume" lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified amount of traffic (in kilobytes) has
passed through the IPSec "tunnel" using the SA.
Cisco IOS XR System Security Configuration Guide
SC-105
Hide quick links:
Advertisement
Chapters
Table of Contents
