Cisco Cisco Packet Data Gateway (PDG)
lifetime
Configures the number of seconds for IPSec Child SAs derived from this crypto template payload to exist.
Product
All Security Gateway products
Privilege
Security Administrator
Command Modes
Exec > Global Configuration > Context Configuration > Crypto Template Configuration > Crypto Template
IKEv2-Dynamic Payload Configuration
IKEv2-Dynamic Payload Configuration
configure > context context_name > crypto template template_name ikev2-dynamic > payload payload_name
match childsa match { any | ipv4 | ipv6 }
match childsa match { any | ipv4 | ipv6 }
Entering the above command sequence results in the following prompt:
[
context_name
]
host_name
(cfg-crypto-tmpl-ikev2-tunnel-payload)#
Syntax Description
lifetime { sec [ kilo-bytes kbytes ] | kilo-bytes kbytes }
default lifetime
default lifetime
sec
Specifies the number of seconds for IPSec Child Security Associations derived from this crypto template
payload to exist. sec must be an integer from 60 through 604800. Default: 86400
payload to exist. sec must be an integer from 60 through 604800. Default: 86400
kilo-bytes kbytes
Specifies lifetime in kilobytes for IPSec Child Security Associations derived from this crypto template payload.
kbytes must be an integer from 1 through 2147483647.
kbytes must be an integer from 1 through 2147483647.
default lifetime
Sets the lifetime to its default value of 86400 seconds.
Usage Guidelines
Use this command to configure the number of seconds and/or kilobytes for IPSec Child Security Associations
derived from this crypto template payload to exist.
derived from this crypto template payload to exist.
Examples
The following command configures the IPSec child SA lifetime to be 120 seconds:
lifetime 120
lifetime 120
Command Line Interface Reference, Modes C - D, StarOS Release 19
1277
Crypto Template IKEv2-Dynamic Payload Configuration Mode Commands
lifetime