tunnel lifetime

Syntax

tunnel lifetime { kilobytes kbytes | seconds secs | seconds secs kilobytes kbytes }

no tunnel lifetime { seconds | kilobytes }

Release Information

Command introduced before JunosE Release 7.1.0.

Description

Sets the lifetime of IPSec SAs running on this tunnel. You can specify the lifetime in seconds and/or volume of traffic. Before either limit is reached, the SA is renegotiated, ensuring that the tunnel does not go down before the renegotiation is finished. The no version sets the lifetime to the default lifetime of 28800 seconds and an unlimited volume.

Options

• secs—Number of seconds security SAs on this tunnel live before expiring, in the range 1800–864000
• kbytes—Volume of traffic in kilobytes that can pass between the tunnel endpoints using a given SA before the SA expires, in the range 102400–4294967295

Mode

Interface Configuration