JUNOSe 9.1.x Command Reference Guide A to M > J-K-L Commands > lifetime

lifetime

Description: 

From IKE Policy Configuration mode, associates a lifetime with IKE SAs established with this IKE policy. The no version restores the lifetime to its default, 28800 seconds (8 hours).

From IPSec Transport Profile Configuration mode, sets a lifetime range for the IPSec connection in volume of traffic and/or in seconds. If the client PC offers a lifetime within this range, the router accepts the offer. The no version returns the lifetime to the default, 100000–4294967295 KB and 900–86400 seconds (1–24 hours).

From IPSec Tunnel Profile Configuration mode, specifies the IPSec lifetime range used on IPSec security association negotiations. The no version returns the lifetime to its default, 28800 seconds (8 hours) and no traffic volume limit.

Syntax: 

To set an IKE lifetime:

lifetime seconds

no lifetime

• seconds—Number of seconds an SA lives before expiring; in the range 900–86400 seconds

To set an IPSec transport profile lifetime:

lifetime { kilobytes lowKilobytes highKilobytes | seconds lowSeconds highSeconds | seconds lowSeconds highSeconds kilobytes lowKilobytes highKilobytes }

no lifetime

• lowKilobytes—Lower range of the lifetime in kilobytes; in the range 100000–4294967295 KB; default value is 100000
• highKilobytes—Higher range of the lifetime in kilobytes; in the range 100000–4294967295 KB; default value is 4294967295
• lowSeconds—Lower range of the lifetime in seconds; in the range 300–86400 seconds; default value is 3600
• highSeconds—Higher range of the lifetime in seconds; in the range 300–86400 seconds; default value is 86400

To set an IPSec tunnel profile lifetime:

lifetime { seconds lowSeconds highSeconds | kilobytes lowKilobytes highKilobytes | seconds lowSeconds highSeconds kilobytes lowKilobytes highKilobytes }

no lifetime

• lowSeconds—Lower range of the lifetime in seconds; in the range 900–86400 seconds; default value is 3600
• highSeconds—Higher range of the lifetime in seconds; in the range 900–86400 seconds; default value is 86400
• lowKilobytes—Lower range of the lifetime in kilobytes; in the range 100000–4294967295 KB; default value is 100000
• highKilobytes—Higher range of the lifetime in kilobytes; in the range 100000–4294967295 KB; default value is 4294967295

Mode(s): 

IKE Policy Configuration, IPSec Transport Profile Configuration, IPSec Tunnel Profile Configuration

    Release Information    Command introduced before JUNOSe Release 7.1.0.
IPSec Tunnel Profile Configuration mode added in JUNOSe Release 7.3.0.