cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
609
Views
0
Helpful
1
Replies
mjsully
Beginner

ipsec lifetime config on ASA

we are moving a lot of ipsec vpn tunnels to an ASA in the coming weeks, most of them have the default ipsec SA lifetime of 28,800, but there are a few that have different values. Do I need to manually set those that differ in their respective crypto map, or will the default suffice and the ASA will negotiate any differences with the other end?

1 REPLY 1
auraza
Cisco Employee

The lower value will be used during negotiation.

Create
Recognize Your Peers
Content for Community-Ad