ipsec lifetime config on ASA

Unanswered Question
Feb 26th, 2009

we are moving a lot of ipsec vpn tunnels to an ASA in the coming weeks, most of them have the default ipsec SA lifetime of 28,800, but there are a few that have different values. Do I need to manually set those that differ in their respective crypto map, or will the default suffice and the ASA will negotiate any differences with the other end?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
auraza Thu, 02/26/2009 - 12:27

The lower value will be used during negotiation.

Actions

This Discussion