Setting The Sa Lifetime - HP Cisco MDS 9216 - Fabric Switch Configuration Manual

Chapter 44 Configuring IPsec Network Security
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
To specify SA lifetime negotiation values, you can optionally configure the lifetime value for a specified
crypto map. If you do, this value overrides the globally set values. If you do not specify the crypto map
specific lifetime, the global value (or global default) is used.
See the

Setting the SA Lifetime

To set the SA lifetime for a specified crypto map entry using Fabric Manager, follow these steps:
Expand Switches > Security and then select IPSEC in the Physical Attributes pane.
Step 1
You see the IP SEC configuration in the Information pane (see
Figure 44-24
Step 2 Choose the CryptoMap Set Entry tab.
You see the existing crypto maps configured (see
Figure 44-25
Step 3 Scroll to the right half of the dialog box.
OL-16184-01, Cisco MDS SAN-OS Release 3.x
"Global Lifetime Values" section on page 44-37
IPsec Configuration
Existing Crypto Maps - Leftmost Columns
for more information on global lifetime values.
Figure 44-24).
Figure 44-25).
Cisco MDS 9000 Family CLI Configuration Guide
Crypto IPv4-ACLs
44-31