cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
428
Views
0
Helpful
0
Replies

Ipsec volume lifetime Sa mismatch - ASA vs Router

Brian Dean
Level 1
Level 1

I'm looking at needing to increase the volume-based lifetime SA on ipsec tunnels between an ASA running 8.4 and an ASR running 15 something. The ASR side has the ability to turn off the volume sa option, but I can't on the ASA at this code. What would be the result if I were to disable the volume sa on the ASR and leave the ASA enabled with something.... would it negotiate to what the ASA is configured with, negotiate to no amount of data (disabling it completely for both sides)...or break everything entirely keeping the tunnels from coming up at all. I suspect the later, but I don't have an evironment I can lab this in. I realize if both had a figure they would negotiate to the lowest, but in that case I would configure both equally.

0 Replies 0