?
Solved

VPN Configuration

Posted on 2007-04-03
4
Medium Priority
?
412 Views
Last Modified: 2008-01-09
I have to put a VPN from an ASA5505 to a Cisco VPN concentrator - no problem - however

In the documentation from the owners of the Concentrator they have asked that I set

IPSEC SA Lifetime
  460800 Kilobytes
  28800 Seconds

At the moment my VPN has the default policy of

 lifetime 86400

I can change that easy enough but I cant see how to set a data limit in kilobytes?
0
Comment
Question by:Pete Long
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 2000 total points
ID: 18842711
If you're using the ASDM GUI:
Configuration | VPN | IPSEC | IPSec Rules
Select the tunnel policy | Edit
 Tunnel Policy (Crypto Map) - Advanced tab
   Security Association Lifetime settings
   Time:    [  8 ] : [ 0 ] :  [ 0 ] hrs min sec  <== default
   Traffic Volume: 4608000  <== default

Default 8 hours = 28800 Seconds
Required Kilobytes is the default
Default settings don't necessarily show up in the configs.

Your IKE lifetime is not the same as the SA lifetime. The IKE lifetime default is 86400.
If the l2l tunnel is working, don't mess with the settings.
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18842781
Cheers Les - Will be testing it in the morning :)
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849368
Came up no problem cheers - now I need to change it > next Question..
http://www.experts-exchange.com/?qid=22491286
0
 
LVL 57

Author Comment

by:Pete Long
ID: 18849370
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Concerto Cloud Services, a provider of fully managed private, public and hybrid cloud solutions, announced today it was named to the 20 Coolest Cloud Infrastructure Vendors Of The 2017 Cloud  (http://www.concertocloud.com/about/in-the-news/2017/02/0…
Let’s face it: one of the reasons your organization chose a SaaS solution (whether Microsoft Dynamics 365, Netsuite or SAP) is that it is subscription-based. The upkeep is done. Or so you think.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question