Command Reference Guide

264 ● sa duration 3Com Router 5000 Family and Router 6000 Family
Command Reference
expires first, the SA will get invalid. Before the SA is about to get invalid, IKE will set
up a new SA for IPSec negotiation. So, a new SA is ready before the existing one gets
invalid.
The SA duration does not function for an SA manually set up, that is, the SA manually
set up will never be invalidated.
Related Commands ■ ipsec policy (Interface view)
■ ipsec policy (System view)
■ ipsec sa global-duration
■ proposal
■ security acl
■ tunnel local
■ tunnel remote