Juniper JUNOSE 11.1.X - COMMAND REFERENCE N TO Z 4-6-2010, Command Reference Manual

Page: 1388 / 1488

tunnel lifetime
Syntax
tunnel lifetime { kilobytes kbytes | seconds secs | seconds secs kilobytes kbytes }
no tunnel lifetime { seconds | kilobytes }
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in
seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated,
ensuring that the tunnel does not go down before the renegotiation is finished. The
no version sets the lifetime to the default lifetime of 28800 seconds and an unlimited
volume.
Options
secs —Number of seconds security SAs on this tunnel live before expiring, in the
range 1800–864000
■
■
kbytes —Volume of traffic in kilobytes that can pass between the tunnel endpoints
using a given SA before the SA expires, in the range 102400–4294967295
Mode
Interface Configuration
1346 ■
tunnel lifetime
JUNOSe 11.1.x Command Reference Guide N to Z