Juniper JUNOSE 11.0, Command Reference Manual

Page: 1029 / 1486

ipsec lifetime
Syntax
[ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Specifies the default lifetime in volume of traffic or seconds. The default lifetime
applies to secure tunnels that do not have a tunnel lifetime defined. When either the
volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA.
The
no version restores the default values.
Options
kilobytes —Volume of traffic in kilobytes that can pass between IPSec peers before
the SA expires; in the range 102400–4294967295; default value is 4294967295
kilobytes; a setting of zero turns off the kilobyte lifetime
■
■
seconds —Number of seconds an SA lives before expiring; in the range
7200–4294967295; default value is 28800 seconds (8 hours)
Mode
Global Configuration
ipsec lifetime
■ 987
Chapter 10: I Commands