Zte ZXR10 - Crypto Ipsec Sa Global-Lifetime

Chapter6IPSecIPv4NetworkSafecommands
�ItisimplementedmainlyonGARcurrently.
�Afterthiscommandiscongured,IPSecPMTUisenabled.
ExampleInthisexample,IPSecPMTUdiscoverisenabled,andthenitis
disabled.
ZXR10(config)#cryptoipsecpmtudiscover
ZXR10(config)#nocryptoipsecpmtudiscover
Related
Commands
cryptomap
cryptoipsecsa
global-lifetime
PurposeUsethiscommandtocongureIPSecSecurityAssociationslifetime
inglobalcongurationmode.
CommandModesGlobalconguration
Syntaxcryptoipsecsaglobal-lifetime{seconds<seconds>|kiloby
tes<kilobytes>}
nocryptoipsecsaglobal-lifetime
Syntax
Description
<seconds>
Lifetime,inseconds
<kilobytes>
Lifetime,inkilobytes
DefaultsThelifetimeis28800secondsor1843200000kilobytesbydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthis
command.
�ItisimplementedmainlyonGARcurrently.
�IfSecurityAssociationslifetimeinthepolicyisnotcongured,
ituestheglobalconguredlifetime.
ExampleItissupposedthatIPSecsecuritypolicynamedmymaphasbeen
createdonR1,Thisexampledescribedhowtosetgloballifetime
forpolicymap.
ZXR10(config)#cryptoipsecsaglobal-lifetime
kilobytes5555seconds120
ZXR10(config)#showcryptoipsecsa-global-lifetimesecurity
associationlifetime:5555kilobytes/120seconds
ZXR10(config)#nocryptoipsecsaglobal-lifetime
Related
Commands
showcryptomap
showcryptoipsecsa-global-lifetime
CondentialandProprietaryInformationofZTECORPORATION69