sak-rekey-interval
To configure the key lifetime for the child security associations (SA), use the
sak-rekey-interval
command
in OTNSec policy configuration mode.
sak-rekey-interval seconds
Syntax Description
SAK rekey timer in seconds. The range is from 30 to 1209600 seconds.
seconds
Command Default
None
Command Modes
OTNSec policy configuration
Command History
Modification
Release
This command is
introduced.
Release
7.0.1
Example
The following is a sample in which an OTNSec policy is configured.
RP/0/RP0/CPU0:ios#configure
Mon Mar 11 15:16:58.417 UTC
RP/0/RP0/CPU0:ios(config)#otnsec policy otnsec-policy1
RP/0/RP0/CPU0:ios(config-otnsec-policy)#cipher-suite AES-GCM-256
RP/0/RP0/CPU0:ios(config-otnsec-policy)#security-policy must-secure
RP/0/RP0/CPU0:ios(config-otnsec-policy)#
sak-rekey-interval 120
RP/0/RP0/CPU0:ios(config-otnsec-policy)#commit
The following is a sample of an OTNSec policy.
RP/0/RP0/CPU0:ios#show run otnsec policy otnsec-policy1
Tue Mar 12 11:14:03.591 UTC
otnsec policy otnsec-policy1
cipher-suite AES-GCM-256
security-policy must-secure
sak-rekey-interval 120
!
Command Reference for Cisco NCS 1004
65
Commands
sak-rekey-interval