IKEv2 protection mechanisms

[iores]

Hi,

what is the difference between these to commands lines:

crypto ikev2 limit max-in-negotiation-sa 6 outgoing

crypto ikev2 limit max-in-negotiation-sa 6

 Thank you!

[Rob Ingram]

@iores

crypto ikev2 limit max-in-negotiation-sa 6 = allowed limit of incoming SA requests to the router. This appears to be the same if you append "incoming" to the end of the command.

crypto ikev2 limit max-in-negotiation-sa 6 outgoing = allowed limited of outgoing SA requests from the router.

You can see the configured (or default) in/out SA limits using the command show crypto ikev2 stats

[MHM Cisco World]

this is for CAC of IPSec 
Call Admission Control for IKE (cisco.com)

CAC is control of IPsec.