IPsec VPN Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
765
Alcatel-Lucent
Beta
Beta
CLI Configuration Guide
T
O
C
ONFIGURE
IP
SEC
SA L
IFETIME
IKE is used for SA negotiation. It requires a proposal to be configured so that a
secure channel can be established to authenticate the negotiating parties.
When
both lifetime in kilobytes and lifetime in seconds is set, re-negotiation of new SA is
triggered depending on which lifetime expires first. When re-keying happens, both
lifetimes get reset.
Note:
IPsec security lifetime associations has a default value of
28800
seconds.
There is no default value for IPsec security-association lifetime in Kilobytes.
E
XAMPLE
ALU(config-crypto-ike-policy-P1)# ipsec security-association
lifetime kilobytes 5400
ALU(config-crypto-ike-policy-P1)# ipsec security-association
lifetime seconds 5400
ALU(config-crypto-ike-policy-P1)# no ipsec security-association
lifetime kilobytes
ALU(config-crypto-ike-policy-P1)# no ipsec security-association
lifetime seconds
Command (in IKE Policy CM)
Description
ipsec security-association
lifetime
{
kilobytes
<
512-
2147483647>|seconds
<
540-86400>
}
This command is used to configure
the SA lifetime in kilobytes/seconds.
no ipsec security-association
lifetime
{
kilobytes|seconds
}
The ‘no’ command resets the IPsec
SA lifetime in seconds value to its
default.
The ‘no’ command removes the
IPsec security-association lifetime in
kilobytes value.
Summary of Contents for OmniAccess 700
Page 38: ...Left running head Chapter name automatic 12 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 176: ...Left running head Chapter name automatic 150 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 260: ...Left running head Chapter name automatic 234 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 434: ...Left running head Chapter name automatic 408 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 464: ...Left running head Chapter name automatic 438 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 638: ...Left running head Chapter name automatic 612 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 940: ...Left running head Chapter name automatic 914 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1002: ...Left running head Chapter name automatic 976 Beta Beta CLI Configuration Guide Alcatel Lucent ...
Page 1120: ...Left running head Chapter name automatic 2 Beta Beta CLI Configuration Guide Alcatel Lucent ...