[Contents][Prev][Next][Index][Report an Error]

Configuring the Lifetime for an IKE SA

The lifetime-seconds statement sets the lifetime of an IKE SA. When the IKE SA expires, it is replaced by a new SA (and SPI) or the IPSec connection is terminated.

To configure the IKE SA lifetime, include the lifetime-seconds statement at the [edit services ipsec-vpn ike proposal proposal-name] hierarchy level:




lifetime-seconds seconds;

By default, the IKE SA lifetime is 3600 seconds. The range is from 180 through 86,400 seconds.

Note: For IKE proposals, there is only one SA lifetime value, specified by the JUNOS software. IPSec proposals use a different mechanism; for more information, see Configuring the Lifetime for an IPSec SA.

[Contents][Prev][Next][Index][Report an Error]