Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    ipsec lifetime

    Syntax

    [ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }

    Release Information

    Command introduced before JunosE Release 7.1.0.

    Description

    Specifies the default lifetime in volume of traffic or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPsec renegotiates the SA. The no version restores the default values.

    Options

    • kilobytes—Volume of traffic in kilobytes that can pass between IPsec peers before the SA expires; in the range 102400–4294967295; default value is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime
    • seconds—Number of seconds an SA lives before expiring; in the range 7200–4294967295; default value is 28800 seconds (8 hours)

    Mode

    Global Configuration

    Published: 2014-08-14