Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Question on Cisco ASA 5505

I need an answer to a question concering our Cisco ASA 5505.  We are working on setting up a VPN and there are two questions the contractor on the other side of the VPN is asking that I have tried but have yet to find the answer to.

What is the Renegotiate IKE SA Every ?

What is the Renegotiate IPSEC SA?

The equipment that will be used on their side is a Nokia Checkpoint NGX

Their Renegotiate IKE SA Every is 1440 minutes

Their Renegotiate IPSEC SA is 3600 sec = every 1 hour.

Can some please answer these two questions.  The attachment is the form containing the information needed for the VPN to work.

1 REPLY
Cisco Employee

Question on Cisco ASA 5505

Hi Linda,

The default IKE SA lifetime is 86,400 seconds and the default IPSEC SA lifetime is 28,800 seconds. However, these values are configurable so you'll need to check your 5505 configuration to answer these questions. You can look at the output of 'show run crypto' to see the configured values.

-Mike

502
Views
0
Helpful
1
Replies
CreatePlease to create content