IKE Phase 1 and Phase 2 lifetimes

This feature enables you to configure the lifetimes of IKE Phase 1 and Phase 2 security associations. The Phase 1 lifetime determines how long an IKE SA remains valid before it must be renegotiated, while the Phase 2 lifetime determines how long an IPsec SA remains valid before replacement. Phase 2 lifetimes can be configured in seconds or by the amount of data transferred, where supported.