
lifetime
To configure the lifetime of IKEv2 security association (SA), use the
lifetime
command in IKEv2 profile
configuration mode.
lifetime seconds
Syntax Description
Specifies the lifetime in seconds. The range is from 120 to 86400 seconds.
seconds
Command Default
None
Command Modes
IKEv2 profile configuration
Command History
Modification
Release
This command is
introduced.
Release
7.0.1
Example
The following is a sample in which an IKEv2 profile is configured.
RP/0/RP0/CPU0:ios#configure
Thu Mar
7 20:00:36.490 UTC
RP/0/RP0/CPU0:ios(config)#ikev2 profile profile1
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#match identity remote address 10.0.0.1
255.255.255.0
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#keyring kyr1
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#
lifetime 120
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#commit
Thu Mar
7 20:15:03.401 UTC
RP/0/RP0/CPU0:ios(config-ikev2-profile-profile1)#exit
RP/0/RP0/CPU0:ios(config)#exit
RP/0/RP0/CPU0:ios#show ikev2 profile profile1
Thu Mar
7 20:15:25.776 UTC
Profile Name
: profile1
===============================================================================
Keyring
: kyr1
Lifetime(Sec)
: 120
DPD Interval(Sec)
: 10
DPD Retry Interval(Sec)
: 2
Match ANY
: NO
Total Match remote peers
: 1
Addr/Prefix
: 10.0.0.1/255.255.255.0
Command Reference for Cisco NCS 1004
46
Commands
lifetime