From: Todd Veillette (tveillette@myeastern.com)
Date: Fri Jan 23 2004 - 21:00:52 GMT-3
The isakmp is for re-negotiation of your s-key's.
-TV
----- Original Message -----
From: "David Hiers" <David_Hiers@adp.com>
To: "Ellie Chou" <ellie_chou@hotmail.com>; <ccielab@groupstudy.com>
Sent: Friday, January 23, 2004 9:56 AM
Subject: RE: IPsec-what's the difference between these two timer?
> I believe that "set security-association" is a per-crypto-map override of
the global "lifetime" command.
>
> From the doc cd:
>
> "To override (for a particular crypto map entry) the global lifetime
value, which is used when negotiating IP Security security associations, use
the set security-association lifetime command in crypto map configuration
mode."
>
> David
>
>
> ********************************************
> David Hiers
> CCIE, CISSP
> ADP Dealer Services
> 2525 SW First Avenue
> Portland, OR 97201
>
> v: 503 402 3703
> email: david_hiers@adp.com
> ********************************************
>
>
> -----Original Message-----
> From: Ellie Chou [mailto:ellie_chou@hotmail.com]
> Sent: Thursday, January 22, 2004 8:45 PM
> To: ccielab@groupstudy.com
> Subject: IPsec-what's the difference between these two timer?
>
>
> Hi, Can someone tell me what's the difference between the " set
> security-association lifetime seconds 1800" under crypto map config and
> the " lifetime 1800" under crypto isakmp policy config? thanks! I know
> the the first one is the lifetime of a security association but not sure
> what the 2nd is for and if they have any corelation. thanks Ellie
>
> ------------------------------------------------------------------------
>
> Let the new MSN Premium Internet Software make the most of your
> high-speed experience.
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Mon Feb 02 2004 - 09:07:49 GMT-3