sa duration

Syntax

sa duration seconds

undo sa duration

View

IKE proposal view

Default level

2: System level

Parameters

Seconds: Specifies the ISAKMP SA lifetime in seconds, in the range 60 to 604800.

Description

Use the sa duration command to set the ISAKMP SA lifetime for an IKE proposal.

Use the undo sa duration command to restore the default.

By default, the ISAKMP SA lifetime is 86400 seconds.

Before an SA expires, IKE negotiates a new SA. The new SA takes effect immediately after being set up, and the old one will be cleared automatically when it expires.

Related commands: ike proposal and display ike proposal.

Examples

# Specify the ISAKMP SA lifetime for IKE proposal 10 as 600 seconds (10 minutes).

<Sysname> system-view
[Sysname] ike proposal 10
[Sysname-ike-proposal-10] sa duration 600