In this section:
Use the IKE Protection Profile window to configure IKE Protection Profiles by establishing an encryption algorithm, the maximum SA lifetime, and other SA conditions, for an IKE peer. These properties are linked to each IKE peer that is provisioned with this profile. On the SBC main screen, go to Configuration > Profile Management > Category: Security Profiles > IKE Protection Profile. The IKE Protection Profile window is displayed. To Create an IKE Protection Profile To create a new IKE Protection Profile, click New Ike Protection Profile. The Create New IKE Protection Profile window opens. Parameter Description Name The name of the IKE Protection Profile. SA Lifetime The SA Lifetime setting, in seconds. This is the maximum interval that any one Security Association will be maintained before possible re-keying. Must be 1200- The default value corresponds to 8 hours DPD Interval Specifies the IKE Protection Profile Dead Peer Detection test interval period in seconds. The value '0' corresponds to DPD disabled. Enable flag to require PFS use during IPSec SA negotiation. To Edit IKE Protection Profiles To edit an IKE Protection Profile: To copy an IKE Protection Profile: To delete an IKE Protection Profile:To View IKE Protection Profiles
Time
1,000,000, default is 28,800 (seconds).This parameter applies to the IKE SA when it appears in the IKE Protection Profile and to the IPsec SA when it appears in the IPsec Protection Profile.Pfs Required To Copy an IKE Protection Profile
To Delete an IKE Protection Profile