HP 7000 dl Router manual Set security-association lifetime kilobytes seconds value

SROS Command Line Interface Reference Guide Crypto Map IKE Command Set

set security-association lifetime [kilobytes seconds] <value>

Use the set security-association lifetime command to define the lifetime (in kilobytes and/or seconds) of the IPSec SAs created by this crypto map.

Syntax Description

kilobytes <value> SA lifetime limit in kilobytes.

seconds <value> SA lifetime limit in seconds.

Default Values

By default, security-association lifetime is set to 28,800 seconds and there is no default for the kilobytes lifetime.

Command Modes

(config-crypto-map)# Crypto Map IKE Configuration Mode

Functional Notes

Values can be entered for this command in both kilobytes and seconds. Whichever limit is reached first will end the security association.

Usage Examples

The following example sets the SA lifetime to 300 kilobytes and 2 hours:

(config-crypto-map)#set security-association lifetime kilobytes 300 (config-crypto-map)#set security-association lifetime seconds 7200

5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 403