fsVpnIkePhase1LifeTime
FS-VPNPOLICY-MIB ·
.1.3.6.1.4.1.2076.143.1.1.1.34
Object
column
r/w
Integer32
Enter the duration, in fsVpnIkePhase1LifeTimeType, of the IKE security
association (SA), after which the IKE SA expires and is re-negotiated.
if you wish to save setup time for new IPsec SAs, configure a longer
IKE SA lifetime. However, shorter lifetimes provide more secure IKE
negotiations because the SA between the tunnel endpoints must be
successfully renegotiated more frequently.
NOTE in case of IKEv1: If the IKEv1 lifetimes on two peers are not the
same (equal in duration), the IKE policy lifetime of the initiating peer
must be shorter than the lifetime of the responding peer, and the shorter
lifetime will be used in IKE negotiations between the devices.
Context
- MIB
- FS-VPNPOLICY-MIB
- OID
.1.3.6.1.4.1.2076.143.1.1.1.34- Type
- column
- Access
- readwrite
- Status
- current
- Parent
- fsVpnEntry
Syntax
Integer32
Values & Constraints
No enumerated values or constraints recorded.