ADTRAN AOS Version R10.1.0 Command Reference Manual page 3931

Command Reference Guide
set security-association lifetime
Use the set security-association lifetime command to define the lifetime (in kilobytes and/or seconds) of
the IPSec security associations (SAs) created by this crypto map. Use the no form of this command to
return to the default setting. Variations of this command include:
set security-association lifetime kilobytes <value>
set security-association lifetime seconds <value>
Syntax Description
kilobytes <value>
seconds <value>
Default Values
By default, the security-association lifetime is set to 28800 seconds, and there is no default for the
kilobytes' lifetime.
Command History
Release 4.1
Functional Notes
Values can be entered for this command in both kilobytes and seconds. Whichever limit is reached first will
end the SA.
Usage Examples
The following example sets the SA lifetime to 300 kilobytes and 2 hours (7200 seconds):
(config)#crypto map MyMap 100 ipsec-ike
(config-crypto-map)#set security-association lifetime kilobytes 300
(config-crypto-map)#set security-association lifetime seconds 7200
60000CRG0-35E
Specifies the SA lifetime limit in kilobytes.
Specifies the SA lifetime limit in seconds.
Command was introduced.
Copyright © 2012 ADTRAN, Inc.
Crypto Map IKE Command Set
3931