Specifications

Switch Security 6-45
• Viewing IPSec Security Associations
6.8.1 Defining the IPSec Configuration
Use the IPSec VPN Configuration screen to view the attributes of existing VPN tunnels and modify the
security association lifetime and keep alive intervals used to maintain the routes between VPN peers. From
the Configuration screen, transform sets can be created as existing sets modified or deleted.
1. Select Security > IPSec VPN from the main menu tree.
2. Click the Configuration tab.
3. Refer to the Configuration field to define the following information.
SA Lifetime (secs) For IKE based security associations, define a SA Lifetime (in seconds) forcing the periodically
expiration and re-negotiation of peer credentials. Thus, continually validating the peer
relationship. The default value is 3600 seconds.
SA Lifetime (Kb) Causes the security association to time out after the specified amount of traffic (in kilobytes)
have passed through the IPSec tunnel using the security association. The default value is
4608000 Kb.
Apply Click Apply to save any updates you may have made to the screen.
Revert Click the
Revert button to disregard any changes you have made and revert back to the last
saved configuration.