03-19-2010 02:08 PM
Hello
Is there a way of deploying just-modified policies right away without waiting for the expiration of the previous ones?
Manually clear the GMs is not an option. At least not using clear crypto gdoi. That requires confirmation and we don’t figure how to do it with CiscoWorks, if possible.
Thanks
Guido
Solved! Go to Solution.
03-20-2010 07:14 AM
Hi Guido,
What policy did you change on the KS? Changing the ACL policy on KS will trigger rekey, donot need to wait the SA expire.
HTH,
Lei Tian
03-20-2010 07:14 AM
Hi Guido,
What policy did you change on the KS? Changing the ACL policy on KS will trigger rekey, donot need to wait the SA expire.
HTH,
Lei Tian
03-22-2010 07:55 AM
Thanks, Lei
I later on found a DOC with a chart displaying all the policies that would trigger a rekey. I paste the link for posterity.
Thanks again
Guido
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: