Cisco Cisco Packet Data Gateway (PDG) プリント
Rekeying SAs
▀ Sequence Number-based Rekeying
▄ Cisco StarOS IP Security (IPSec) Reference
138
Crypto Map and Crypto Template Rekey Configurations
There are a number of Context Configuration mode commands with rekey keywords.
For crypto maps refer to the following commands:
crypto map <map_name>> ikev2-ikesa replay
crypto map <map_name> ikev2-ipv4 rekey
crypto map <map_name> ikev2-ipv6 rekey
For crypto template refer to the following commands:
crypto template <template_name> ikev2-dynamic payload rekey
crypto template <template_name> ikev2-ikesa rekey
show crypto ipsec security-associations
This Exec mode show command displays the childSA lifetime based on sequence number.