Implementing IPSec Network Security on Cisco IOS XR Software
How to Implement General IPSec Configurations for IPSec Networks
SC-86
Cisco IOS XR System Security Configuration Guide for the Cisco CRS-1 Router
OL-20382-01
DETAILED STEPS
Command or Action Purpose
Step 1
configure
Example:
RP/0/RP0/CPU0:router# configure
Enters global configuration mode.
Step 2
crypto ipsec security-association lifetime
{seconds seconds | kilobytes kilobytes}
Example:
RP/0/RP0/CPU0:router(config)# crypto ipsec
security-association lifetime seconds 2700
Changes global lifetime values used when negotiating
IPSec SAs.
• The seconds seconds keyword and argument change
the global “timed” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified number of seconds have passed.
• The kilobytes kilobytes keyword and argument change
the global “traffic-volume” lifetime for IPSec SAs.
This form of the command causes the SA to time out
after the specified amount of traffic (in kilobytes) has
passed through the IPSec “tunnel” using the SA.
To Next Page
Need help?
General
