Cisco Cisco Packet Data Interworking Function (PDIF)
Rekeying SAs
▀ Sequence Number-based Rekeying
▄ IPSec Reference, StarOS Release 18
136
Crypto Map and Crypto Template Rekey Configurations
There are a number of Context Configuration mode commands with rekey keywords.
For crypto maps refer to the following commands:
crypto map map_name ikev2-ikesa replay
crypto map map_name ikev2-ipv4 rekey
crypto map map_name ikev2-ipv6 rekey
For crypto template refer to the following commands:
crypto template template_name ikev2-dynamic payload rekey
crypto template template_name ikev2-ikesa rekey
show crypto ipsec security-associations
This Exec mode show command displays the childSA lifetime based on sequence number.