Set Security-Association Lifetime - Avaya G450 Cli Reference Manual

CLI Commands
Example
To specify that IKE employs the 768-bit Diffie-Hellman prime modulus group:
G450-001(config-transform:ts1)# set pfs group1
Related Commands
crypto ipsec transform-set, mode,
transform-set

set security-association lifetime

Use the set security-association lifetime command to set the IKE phase 2 (IPSec)
SA (security-association) lifetime. Use the no form of the command to disable the SA lifetime.
Syntax
[no] set security-association lifetime { seconds seconds | kilobytes
{kilobytes | disable} }
Parameters
Parameter
seconds
seconds
kilobytes
kilobytes
disable
User Level
read-write
Context
crypto ipsec transform-set
1212 Avaya G450 CLI Reference
set security-association
Description
Keyword indicating to specify the
lifetime in seconds
The lifetime, in seconds
Keyword indicating to specify the
lifetime by the amount of traffic
that should pass through the
IPSec tunnel before the security
association should time out
The amount of traffic, in kilobytes
Keyword specifying unlimited
lifetime
lifetime, show crypto ipsec
Possible Values
120-86,400
2,560-536,870,912
VPN
Default
Value