Avaya G450 Manager, Cli Reference Manual

Page: 1212 / 1334

CLI Commands VPN
1212 Avaya G450 CLI Reference
Example
To specify that IKE employs the 768-bit Diffie-Hellman prime modulus group:
G450-001(config-transform:ts1)# set pfs group1
Related Commands
crypto ipsec transform-set , mode , set security-association lifetime , show crypto ipsec
transform-set
set security-association lifetime
Use the
set security-association lifetime
command to set the IKE phase 2 (IPSec)
SA (security-association) lifetime. Use the
no
form of the command to disable the SA lifetime.
Syntax
[no] set security-association lifetime { seconds seconds | kilobytes
{ kilobytes |
disable} }
Parameters
User Level
read-write
Context
crypto ipsec transform-set
Parameter Description Possible Values Default
Value
seconds
Keyword indicating to specify the
lifetime in seconds
seconds
The lifetime, in seconds 120-86,400
kilobytes
Keyword indicating to specify the
lifetime by the amount of traffic
that should pass through the
IPSec tunnel before the security
association should time out
kilobytes
The amount of traffic, in kilobytes 2,560-536,870,912
disable
Keyword specifying unlimited
lifetime