Cisco Cisco ASR 5000

 

set pfs group1 

The following command sets the SA lifetime to 

 KB: 

set security-association lifetime kilo-bytes 50000 

The following command sets the SA lifetime to 

 seconds: 

set security-association lifetime seconds 10000 

The following command enables the SA to re-key when the tunnel lifetime expires: 

set security-association lifetime keepalive 

The following command defines transform sets 

 and 

. 

set transform-set tset1 transform-set tset2