IPsec parameters
Digi TransPort User Guide 435
Renegotiate after h hrs m mins s secs
How long the initial IKEv2 Security Association will stay in force. When it expires any attempt to
send packets to the remote system will result in IKE attempting to establish a new SA.
Rekey after h hrs m mins s secs
When the time left until expiry for this SA reaches the value specified by this parameter, the
IKEv2 SA will be renegotiated, such as a new IKEv2 SA is negotiated and the old SA is removed.
Any IPSec child SAs that were created are retained and become children of the new SA.
Related CLI commands
Entity Instance Parameter Values Equivalent Web Parameter
ike2 n iencalg des, 3des, aes Encryption
ike2 n ienkeybits 128, 192, 256 Encryption (AES Key length)
ike2 n iauthalg md5, sha1 Authentication
ike2 n iprfalg md5, sha1 PRF Algorithm
ike2 n idhgroup 1, 2, 5 MODP Group for Phase 1
ike2 n ltime 1-28800 Renegotiate after h hrs m mins s secs
This CLI value is entered in seconds only.
ike2 n rekeyltime 1-28800 Rekey after h hrs m mins s secs
This CLI value is entered in seconds only.
To Next Page
Loading...
