Cisco IOS XR User Manual

Implementing IPSec Network Security on Cisco IOS XR Software
How to Implement General IPSec Configurations for IPSec Networks
SC-105
Cisco IOS XR System Security Configuration Guide
Setting Global Lifetimes for IPSec Security Associations
This task sets global lifetimes for IPSec security associations.
SUMMARY STEPS
1. configure
2. crypto ipsec security-association lifetime {seconds seconds | kilobytes kilobytes}
3. end
or
commit
4. clear crypto ipsec sa {sa-id | all}
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto ipsec security-association lifetime
{seconds
seconds | kilobytes kilobytes }
Example:
RP/0/RP0/CPU0:router(config)# crypto ipsec
security-association lifetime seconds 2700
Changes global lifetime values used when negotiating
IPSec SAs.
• The seconds seconds keyword and argument change
the global “timed” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified number of seconds have passed.
• The kilobytes kilobytes keyword and argument change
the global “traffic-volume” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified amount of traffic (in kilobytes) has
passed through the IPSec “tunnel” using the SA.

Cisco IOS XR Specifications

General

Operating System	Cisco IOS XR
Architecture	Microkernel
High Availability	Yes
Type	Network operating system
Developed by	Cisco Systems
License	Proprietary
Programming Language	C, C++
Kernel	QNX
Supported Platforms	Cisco ASR9000, NCS series
Security Features	Role-Based Access Control (RBAC), Secure Boot, Encryption
Management Interface	CLI, SNMP, NETCONF, RESTCONF
Release Date	2004
Target Devices	High-end core routers, service provider edge routers, data center interconnect (DCI) routers
Supported Hardware	Cisco routers and switches
Networking Protocols	BGP, OSPF, IS-IS, MPLS
Virtualization Support	Virtualization-ready, supports network function virtualization (NFV) and containerization technologies.