ipsec lifetime

Syntax

[ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }

Release Information

Command introduced before JunosE Release 7.1.0.

Description

Specifies the default lifetime in volume of traffic or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPsec renegotiates the SA. The no version restores the default values.

Options

kilobytes—Volume of traffic in kilobytes that can pass between IPsec peers before the SA expires; in the range 102400–4294967295; default value is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime
seconds—Number of seconds an SA lives before expiring; in the range 7200–4294967295; default value is 28800 seconds (8 hours)

Mode

Global Configuration