Question on Cisco ASA 5505

[lanklam48]

I need an answer to a question concering our Cisco ASA 5505.  We are working on setting up a VPN and there are two questions the contractor on the other side of the VPN is asking that I have tried but have yet to find the answer to.

What is the Renegotiate IKE SA Every ?

What is the Renegotiate IPSEC SA?

The equipment that will be used on their side is a Nokia Checkpoint NGX

Their Renegotiate IKE SA Every is 1440 minutes

Their Renegotiate IPSEC SA is 3600 sec = every 1 hour.

Can some please answer these two questions.  The attachment is the form containing the information needed for the VPN to work.

[mirober2]

Hi Linda,

The default IKE SA lifetime is 86,400 seconds and the default IPSEC SA lifetime is 28,800 seconds. However, these values are configurable so you'll need to check your 5505 configuration to answer these questions. You can look at the output of 'show run crypto' to see the configured values.

-Mike