Ruijie Community

Title: What Is the Default Value of lifetime of ISAKAMP SA and IPSec SA and How to Change the Value? [Print this page]

Author: admin Time: 2017-5-4 20:21
Title: What Is the Default Value of lifetime of ISAKAMP SA and IPSec SA and How to Change the Value?
What Is the Default Value of lifetime of ISAKAMP SA and IPSec SA and How to Change the Value?

Author: admin Time: 2017-5-4 20:22

The default lifetime of the Security Association (SA) of the Internet Security Association and Key Management Protocol (ISAKAMP) is one day and the default lifetime of IPSec SA is one hour.

To change the lifetime of ISAKMP SA, run the following command:

crypto isakmp policy 1

lifetime 3000 //The unit is seconds.

To change the lifetime of IPSec SA, run the following command:

crypto map my_map 1 ipsec-isakmp

set security-association lifetime seconds3000 //The unit is seconds.

Welcome to Ruijie Community (https://community.ruijienetworks.com/)