3Com VCX v7111 User Manual page 325

Parameter Name
IKE SA LifeTime (sec)
[IKEPolicyLifeInSec]
IKE SA LifeTime (KB)
[IKEPolicyLifeInKB]
The lifetime parameters (IKEPolicyLifeInSec and IKEPolicyLifeInKB) determine the duration the SA created
in the main mode phase is valid. When the lifetime of the SA expires, it is automatically renewed by
performing the IKE first phase negotiations. To refrain from a situation where the SA expires, a new SA is
being negotiated while the old one is still valid. As soon as the new SA is created, it replaces the old one.
This procedure occurs whenever an SA is about to expire.
If no IKE methods are defined (Encryption / Authentication / DH Group), the default settings
are applied.
Default IKE First Phase Proposals
Table 93
Encryption
Proposal 0 3DES
Proposal 1 3DES
Proposal 2 3DES
Proposal 3 3DES
To configure the IKE table using the ini file:
The IKE parameters are configured using ini file tables (described in
Tables). Each line in the table refers to a different IKE peer.
The Format line (IKE_DB_INDEX in the example below) specifies the order in which the
actual data lines are written. The order of the parameters is irrelevant. Parameters are not
mandatory unless stated otherwise. To support more than one Encryption / Authentication /
DH Group proposals, for each proposal specify the relevant parameters in the Format line.
Note that the proposal list must be contiguous.
®
3Com VCX V7111 VoIP Gateway User Guide
Description
Determines the time (in seconds) the SA negotiated in the first IKE
session (main mode) is valid. After the time expires, the SA is re-
negotiated.
The default value is 28800 (8 hours).
Determines the lifetime (in kilobytes) the SA negotiated in the first
IKE session (main mode) is valid. After this size is reached, the SA
is re-negotiated.
The default value is 0 (this parameter is ignored).
Authentication
SHA1
MD5
SHA1
MD5
DH Group
1024
1024
786
786
Using Parameter
325