IP
C
SEC
OMMANDS
(IP
P
)
LIFETIME
SEC
ROFILE
lifetime (IPsec Profile)
Overview
Use this command to specify a lifetime for an IPsec SA.
Lifetime measures how long the IPsec SA can be maintained before it expires.
Lifetime prevents a connection from being used too long.
Use the no variant to set the lifetime to default (28800 seconds).
lifetime seconds <300-31449600>
Syntax
no lifetime seconds
Default
If you do not specify a lifetime, the default lifetime of 28800 seconds (8 hours)
applies.
Mode
IPsec Profile Configuration
Examples
To specify a lifetime for an IPsec SA, use the following commands:
awplus(config)#
awplus(config-ipsec-profile)#
To set the lifetime to its default, use the following commands:
awplus(config)#
awplus(config-ipsec-profile)#
Related
crypto ipsec profile
Commands
C613-50077-01 REV A
Parameter
Description
<300-31449600>
Lifetime in seconds.
crypto ipsec profile my_profile
crypto ipsec profile my_profile
Command Reference for AT-AR3050S
AlliedWare Plus™ Operating System - Version 5.4.5-2.x
lifetime seconds 400
no lifetime seconds
2284