HP 7000 dl Router Series Guía de usuario descargar pdf (Pagina 403)

SROS Command Line Interface Reference Guide Crypto Map IKE Command Set

set security-association lifetime [kilobytes | seconds] <value>

Use the set security-association lifetime command to define the lifetime (in kilobytes and/or seconds) of

the IPSec SAs created by this crypto map.

Syntax Description

SA lifetime limit in kilobytes.

SA lifetime limit in seconds.

Default Values

By default, security-association lifetime is set to 28,800 seconds and there is no default for the kilobytes

Command Modes

(config-crypto-map)# Crypto Map IKE Configuration Mode

Functional Notes

Values can be entered for this command in both kilobytes and seconds. Whichever limit is reached first will

end the security association.

Usage Examples

The following example sets the SA lifetime to 300 kilobytes and 2 hours:

(config-crypto-map)#set security-association lifetime kilobytes 300

(config-crypto-map)#set security-association lifetime seconds

Sin comentarios

HP 7000 dl Router Series Guía de usuario Pagina 403