04-16-2023 11:01 AM
Hi,
what is the difference between these to commands lines:
crypto ikev2 limit max-in-negotiation-sa 6 outgoing
crypto ikev2 limit max-in-negotiation-sa 6
Thank you!
04-16-2023 11:13 AM
crypto ikev2 limit max-in-negotiation-sa 6 = allowed limit of incoming SA requests to the router. This appears to be the same if you append "incoming" to the end of the command.
crypto ikev2 limit max-in-negotiation-sa 6 outgoing = allowed limited of outgoing SA requests from the router.
You can see the configured (or default) in/out SA limits using the command show crypto ikev2 stats
04-16-2023 12:30 PM
this is for CAC of IPSec
Call Admission Control for IKE (cisco.com)
CAC is control of IPsec.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide