×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

GETVPN : How to update the security policy from KS to GM instantaneously

Unanswered Question
Mar 4th, 2012
User Badges:

Hi,


I am just wondering how to push the security policy update in KS, eg. change of access-list, to GM immediately ?

If I am right, the update will wait until the rekey life time expired. I know I can exclude on each GM but if I have 500 GMs, it would be very difficult.

any workaround ?


thanks

-santo-

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Marcin Latosiewicz Mon, 03/05/2012 - 02:01
User Badges:
  • Cisco Employee,

Santo,


It depends on what GDOI protocol your KS and GMs support.


It's only recently that we made a change so that new policies are not sent after change.


New versions let you control when update will be pushed (via command).


M.

Actions

This Discussion