security-association

Defines the lifetime (in kilobytes and/or seconds) of IPSec SAs created by this crypto map

Supported in the following platforms:

Access Points — AP310i/e, AP410i/e, AP460i/e, AP560i/h, AP510i/e, AP505i, AP7522, AP7532, AP7562, AP7612, AP7632, AP7662, AP8432, AP8533
Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

security-association lifetime [kilobytes <500-2147483646>|seconds <120-86400>]

Parameters

security-association lifetime [kilobytes <500-2147483646>|seconds <120-86400>]


lifetime [kilobytes <500-2147483646>\| seconds <120-86400>]	Values can be entered in both kilobytes and seconds. Which ever limit is reached first, ends the security association. kilobytes <500-2147483646> – Defines volume based key duration. Specify a value from 500 - 2147483646 bytes. seconds <120-86400> – Defines time based key duration. Specify the time frame from 120 - 86400 seconds.

Note

This command is not applicable to the ipsec-manual crypto map.

Example

nx9500-6C8809(config-profile-default-ap8533-cryptomap-map2#2)#security-association lifetime seconds 123

nx9500-6C8809(config-profile-default-ap8533-cryptomap-map2#2)#show context
 Command not applicable to this crypto map
nx9500-6C8809(config-profile-default-ap8533-cryptomap-map2#2)#