Cisco CRS-1 - Carrier Routing System Router Configuration Manual page 92

How to Implement General IPSec Configurations for IPSec Networks
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Step 2
crypto ipsec security-association lifetime
{seconds seconds | kilobytes kilobytes}
Example:
RP/0/RP0/CPU0:router(config)# crypto ipsec
security-association lifetime seconds 2700
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
SC-86
Implementing IPSec Network Security on Cisco IOS XR Software
Purpose
Enters global configuration mode.
Changes global lifetime values used when negotiating
IPSec SAs.
The seconds seconds keyword and argument change
•
the global "timed" lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified number of seconds have passed.
The kilobytes kilobytes keyword and argument change
•
the global "traffic-volume" lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified amount of traffic (in kilobytes) has
passed through the IPSec "tunnel" using the SA.
OL-20382-01