Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 836 / 1193

IP Security - Virtual Private Network
Left running head:
Chapter name (automatic)
810
Beta Beta
CLI Configuration Guide
Alcatel-Lucent
T
O
C
ONFIGURE
L
IFETIME FOR AN
IP
SEC
P
ROFILE
Note: Lifetime has a default value of 28800 seconds.
There is no default value for lifetime in kilobytes.
E
XAMPLE
ALU(ipsec-profile-PF1)# lifetime seconds 1000
ALU(ipsec-profile-PF1)# lifetime kilobytes 1005236
ALU(ipsec-profile-PF1)# no lifetime seconds
ALU(ipsec-profile-PF1)# no lifetime kilobytes
T
O
A
TTACH AN
IKE I
DENTITY TO AN
IP
SEC
P
ROFILE
Note: IKE identity should only be attached to an IPsec profile if the Authentication type is
‘rsa-sig’
E
XAMPLE
ALU(ipsec-profile-PF1)# ike-identity ID01
ALU(ipsec-profile-PF1)# no ike-identity
Command (in IPsec Profile CM) Description
lifetime { kilobytes < 512-
2147483647>|seconds < 540-86400> }
This command configures lifetime for
an IPsec profile.
Use ‘ kilobytes’ keyword to configure
lifetime in kilobytes, and use
‘seconds’ keyword to configure
lifetime in seconds for a profile.
no lifetime { kilobytes|seconds }
The ‘no’ command resets the seconds
lifetime to default.
If set in kilobytes, the ‘no’ command
removes the kilobytes lifetime value.
Command (in IPsec Profile CM) Description
ike-identity <name>
This command attaches an IKE identity to
an IPsec profile.
no ike-identity
The ‘no’ command detaches the specified
IKE identity attached to a profile.