Solved

VPN Configuration

Posted on 2007-04-03
4
406 Views
Last Modified: 2008-01-09
I have to put a VPN from an ASA5505 to a Cisco VPN concentrator - no problem - however

In the documentation from the owners of the Concentrator they have asked that I set

IPSEC SA Lifetime
  460800 Kilobytes
  28800 Seconds

At the moment my VPN has the default policy of

 lifetime 86400

I can change that easy enough but I cant see how to set a data limit in kilobytes?
0
Comment
Question by:Pete Long
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 18842711
If you're using the ASDM GUI:
Configuration | VPN | IPSEC | IPSec Rules
Select the tunnel policy | Edit
 Tunnel Policy (Crypto Map) - Advanced tab
   Security Association Lifetime settings
   Time:    [  8 ] : [ 0 ] :  [ 0 ] hrs min sec  <== default
   Traffic Volume: 4608000  <== default

Default 8 hours = 28800 Seconds
Required Kilobytes is the default
Default settings don't necessarily show up in the configs.

Your IKE lifetime is not the same as the SA lifetime. The IKE lifetime default is 86400.
If the l2l tunnel is working, don't mess with the settings.
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18842781
Cheers Les - Will be testing it in the morning :)
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849368
Came up no problem cheers - now I need to change it > next Question..
http://www.experts-exchange.com/?qid=22491286
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849370
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
When speed and performance are vital to revenue, companies must have complete confidence in their cloud environment.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question