Solved

VPN Configuration

Posted on 2007-04-03
4
383 Views
Last Modified: 2008-01-09
I have to put a VPN from an ASA5505 to a Cisco VPN concentrator - no problem - however

In the documentation from the owners of the Concentrator they have asked that I set

IPSEC SA Lifetime
  460800 Kilobytes
  28800 Seconds

At the moment my VPN has the default policy of

 lifetime 86400

I can change that easy enough but I cant see how to set a data limit in kilobytes?
0
Comment
Question by:Pete Long
  • 3
4 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 18842711
If you're using the ASDM GUI:
Configuration | VPN | IPSEC | IPSec Rules
Select the tunnel policy | Edit
 Tunnel Policy (Crypto Map) - Advanced tab
   Security Association Lifetime settings
   Time:    [  8 ] : [ 0 ] :  [ 0 ] hrs min sec  <== default
   Traffic Volume: 4608000  <== default

Default 8 hours = 28800 Seconds
Required Kilobytes is the default
Default settings don't necessarily show up in the configs.

Your IKE lifetime is not the same as the SA lifetime. The IKE lifetime default is 86400.
If the l2l tunnel is working, don't mess with the settings.
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18842781
Cheers Les - Will be testing it in the morning :)
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849368
Came up no problem cheers - now I need to change it > next Question..
http://www.experts-exchange.com/?qid=22491286
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849370
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Port forwarding 14 117
cannot connect to openvpn server 9 60
Open a port on Cisco Router 1941 23 35
network error 8 34
If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now