About Sa Lifetime Negotiation - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Crypto IPv4-ACLs
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
Figure 44-22
Step 3 Optionally, click Create Row to create a crypto map entry.
You see the Create Crypto Map dialog box shown in
Figure 44-23
Step 4 Select the switch that you want to configure or modify. If you are creating a crypto map, set the setName
and priority for this crypto map.
Step 5 Select the IPv4-ACL Profile and TransformSetIdList from the drop-down list for this crypto map.
Step 6 Optionally, check the AutoPeer check box or set the peer address if you are creating a crypto map. See
the
Step 7 Choose the appropriate PFS selection. See the
Step 8 Supply the Lifetime and LifeSize. See the
Step 9 Click Create if you are creating a crypto map, or click Apply Changes if you are modifying an existing
crypto map.

About SA Lifetime Negotiation

You can override the global lifetime values (size and time) by configuring an SA-specific lifetime value.
Cisco MDS 9000 Family CLI Configuration Guide
44-30
Existing Crypto Maps
Create Crypto Map Dialog Box
"About the AutoPeer Option" section on page
Chapter 44
Figure 44-23.
44-32.
"About Perfect Forward Secrecy" section on page
"About SA Lifetime Negotiation" section on page
OL-16184-01, Cisco MDS SAN-OS Release 3.x
Configuring IPsec Network Security
44-34.
44-30.