HP Cisco MDS 9500 Cisco MDS 9000 Family Command Reference - Cisco MDS SAN-OS R - Page 284

crypto global domain ipsec security-association lifetime Chapter 4 C Commands Send documentation comments to [email protected] crypto global domain ipsec security-association lifetime To configure global parameters for IPsec, use the crypto global domain ipsec security-association lifetime command. To revert to the default, use the no form of the command. crypto global domain ipsec security-association lifetime {gigabytes number | kilobytes number | megabytes number | seconds number} no crypto global domain ipsec security-association lifetime {gigabytes | kilobytes | megabytes | seconds} Syntax Description gigabytes number kilobytes number megabytes number seconds number Specifies a volume-based key duration in gigabytes. The range is 1 to 4095. Specifies a volume-based key duration in kilobytes. The range is 2560 to 2147483647. Specifies a volume-based key duration in megabytes. The range is 3 to 4193280. Specifies a time-based key duration in seconds. The range is 120 to 86400. Defaults 450 gigabytes and 3600 seconds Command Modes Configuration mode. Command History Release 2.0(x) Modification This command was introduced. Usage Guidelines To use this command, IPsec must be enabled using the crypto ipsec enable command. The global security association lifetime value can be overridden for individual IPsec crypto maps using the set command in IPsec crypto map configuration submode. Examples The following example shows how to configure the system default before the IPsec. switch# config terminal switch(config)# crypto global domain ipsec security-association lifetime gigabytes 500 Related Commands Command Description crypto ipsec enable Enables IPsec. set (IPsec crypto map configuration submode) Configures IPsec crypto map entry parameters. show crypto global domain ipsec Displays the global attributes for IPsec. 4-130 Cisco MDS 9000 Family Command Reference OL-16217-01, Cisco MDS SAN-OS Release 3.x