Cisco IOS XR

Implementing IPSec Network Security on Cisco IOS XR Software
How to Implement General IPSec Configurations for IPSec Networks
SC-105
Cisco IOS XR System Security Configuration Guide
Setting Global Lifetimes for IPSec Security Associations
This task sets global lifetimes for IPSec security associations.
SUMMARY STEPS
1. configure
2. crypto ipsec security-association lifetime {seconds seconds | kilobytes kilobytes}
3. end
or
commit
4. clear crypto ipsec sa {sa-id | all}
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto ipsec security-association lifetime
{seconds
seconds | kilobytes kilobytes }
Example:
RP/0/RP0/CPU0:router(config)# crypto ipsec
security-association lifetime seconds 2700
Changes global lifetime values used when negotiating
IPSec SAs.
• The seconds seconds keyword and argument change
the global “timed” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified number of seconds have passed.
• The kilobytes kilobytes keyword and argument change
the global “traffic-volume” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified amount of traffic (in kilobytes) has
passed through the IPSec “tunnel” using the SA.