Zte ZXR10 - Set Sa Lifetime

Chapter6IPSecIPv4NetworkSafecommands
CommandModesDynamicsecurityconguration,IKEsecurityconguration
Syntaxsetpfslevelkey-identity
nosetpfslevel
Syntax
Description
key-identityPFSprotectingthekeyandidentity
DefaultsThiscommandisdisabledbydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthe
command.
�ItisimplementedmainlyonGARcurrently.
�Thepolicyofmanualtypecannotusethiscommand.Ifitis
key-identity,therststagenegotiationmustbeinmainmode
andcanprovideprotectionforonlyonedataow.Thatis,
therecanbeonlyoneruleinACL.
ExampleThisexampledescribedhowtocreateanIPSecsecuritypolicy
namedmymapanddesignatePFSprotectionforthispolicy.
ZXR10(config)#cryptomapmymap123isakmp
ZXR10(config-crypto-map)#setpfslevelKey-identity
ZXR10(config-crypto-map)#nosetpfslevel
Related
Commands
showcryptomap
cryptomap
setsalifetime
PurposeUsethiscommandtodesignatethelifetimeforpolicy.
CommandModesDynamicsecuritycongurationandIKEsecurityconguration
Syntaxsetsalifetime{seconds<seconds>|kilobytes<kilobytes>}
nosetsalifetime{seconds|kilobytes}
Syntax
Description
<seconds>
Lifetime,inseconds,range:120~86400,
default:28800seconds
<kilobytes>
Lifetime,inkilobytes,range:
2560~4294900000,default:1843200000
kilobytes
DefaultsThelifetimeistheglobalconguredlifetimevaluebydefault.
Instructions�Theplatformversion4.8.01andupgradeversionssupportthis
command.
�ItisimplementedmainlyonGARcurrently.
�Thepolicyofmanualtypecannotusethiscommand.Lifetime
rangeis:120864000(inseconds),or2564294900000(inkilo-
bytes).
ExampleThisexampledescribedhowtocreateanIPSecsecuritypolicy
namedanddesignatethelifetimeforthispolicy.
CondentialandProprietaryInformationofZTECORPORATION77