lifetime

crypto-ikev1/ikev2-policy commands

Specifies how long an IKE SA (encryption/authentication keys) is valid. The value specified is the validity period of the IKE SA from successful key negotiation to expiration.

Supported on the following devices:

Access Points: AP3000/X, AP5010, AP310i/e, AP410i/e, AP505i, AP510i, AP510e, AP560i, AP6522, AP6562, AP7161, AP7502, AP7522, AP7532, AP7562, AP7602, AP7612, AP7622, AP763, AP7662, AP8163, AP8543, AP8533.
Service Platforms: NX5500, NX7500, NX9500, NX9600
Virtual Platforms: CX9000, VX9000

Syntax

lifetime <600-86400>

Parameters

lifetime <600-86400>


lifetime <600-86400>	Specifies how many seconds an IKE SA lasts before it expires. Set a time stamp from 600 - 86400 seconds. <600-86400> – Specify a value from 600 - 86400 seconds. The default is 86400 seconds.

Example

nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#lifetime 655

nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#show context
 crypto ikev1 policy testpolicy
  dpd-keepalive 11
  dpd-retries 10
  lifetime 655
  isakmp-proposal default encryption aes-256 group 2 hash sha
  isakmp-proposal testpraposal encryption aes group 2 hash sha
nx9500-6C8809(config-profile-default-ap8533-ikev1-policy-ikev1-testpolicy)#