Ipsec Lifetime - Juniper JUNOSE 11.1.X - COMMAND REFERENCE A TO M 4-9-2010 Command Reference Manual

ipsec lifetime

[ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }
Syntax
Command introduced before JUNOSe Release 7.1.0.
Release Information
Specifies the default lifetime in volume of traffic or seconds. The default lifetime
Description
applies to secure tunnels that do not have a tunnel lifetime defined. When either the
volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA.
The no version restores the default values.
Options
Global Configuration
Mode
kilobytes Volume of traffic in kilobytes that can pass between IPSec peers before
the SA expires; in the range 102400–4294967295; default value is 4294967295
kilobytes; a setting of zero turns off the kilobyte lifetime
seconds Number of seconds an SA lives before expiring; in the range
7200–4294967295; default value is 28800 seconds (8 hours)
Chapter 10: I Commands
1005
ipsec lifetime