About Sa Lifetime Negotiation - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Crypto IPv4-ACLs
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Figure 44-22
Step 3 (Optional) Click Create Row to create a crypto map entry.
You see the Create Crypto Map dialog box shown in
Figure 44-23
Select the switch that you want to configure or modify. If you are creating a crypto map, set the setName
Step 4
and priority for this crypto map.
Select the IPv4-ACL Profile and TransformSetIdList from the drop-down list for this crypto map.
Step 5
(Optional) Check the AutoPeer check box or set the peer address if you are creating a crypto map. See
Step 6
the
Choose the appropriate PFS selection. See the
Step 7
Supply the Lifetime and LifeSize. See the
Step 8
Click Create if you are creating a crypto map, or click Apply Changes if you are modifying an existing
Step 9
crypto map.

About SA Lifetime Negotiation

You can override the global lifetime values (size and time) by configuring an SA-specific lifetime value.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
44-30
Existing Crypto Maps
Create Crypto Map Dialog Box
"About the AutoPeer Option" section on page
Chapter 44
Figure 44-23.
44-32.
"About Perfect Forward Secrecy" section on page
"About SA Lifetime Negotiation" section on page
OL-17256-03, Cisco MDS NX-OS Release 4.x
Configuring IPsec Network Security
44-34.
44-30.