Command Reference Guide

SROS Command Line Interface Reference Guide Crypto Map IKE Command Set
5991-2114 © Copyright 2005 Hewlett-Packard Development Company, L.P. 403
set security-association lifetime [kilobytes | seconds] <value>
Use the set security-association lifetime command to define the lifetime (in kilobytes and/or seconds) of
the IPSec SAs created by this crypto map.
Syntax Description
kilobytes <value> SA lifetime limit in kilobytes.
seconds
<value> SA lifetime limit in seconds.
Default Values
By default, security-association lifetime is set to 28,800 seconds and there is no default for the kilobytes
lifetime.
Command Modes
(config-crypto-map)# Crypto Map IKE Configuration Mode
Functional Notes
Values can be entered for this command in both kilobytes and seconds. Whichever limit is reached first will
end the security association.
Usage Examples
The following example sets the SA lifetime to 300 kilobytes and 2 hours:
(config-crypto-map)#set security-association lifetime kilobytes 300
(config-crypto-map)#set security-association lifetime seconds
7200