ipsec lifetime config on ASA

Unanswered Question
Feb 26th, 2009
User Badges:

we are moving a lot of ipsec vpn tunnels to an ASA in the coming weeks, most of them have the default ipsec SA lifetime of 28,800, but there are a few that have different values. Do I need to manually set those that differ in their respective crypto map, or will the default suffice and the ASA will negotiate any differences with the other end?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
auraza Thu, 02/26/2009 - 12:27
User Badges:
  • Cisco Employee,

The lower value will be used during negotiation.


This Discussion