ipsec lifetime

Syntax

[ no ] ipsec lifetime { kilobytes kilobytes | seconds seconds }

Release Information

Command introduced before JunosE Release 7.1.0.

Description

Specifies the default lifetime in volume of traffic or seconds. The default lifetime applies to secure tunnels that do not have a tunnel lifetime defined. When either the volume of traffic or number of seconds limit is reached, IPSec renegotiates the SA. The no version restores the default values.

Options

• kilobytes—Volume of traffic in kilobytes that can pass between IPSec peers before the SA expires; in the range 102400–4294967295; default value is 4294967295 kilobytes; a setting of zero turns off the kilobyte lifetime
• seconds—Number of seconds an SA lives before expiring; in the range 7200–4294967295; default value is 28800 seconds (8 hours)

Mode

Global Configuration