Ability to set SA life bytes and packets

https://phabricator.vyos.net/T1856
https://github.com/vyos/vyos-1x/pull/1230
This commit is contained in:
mkorobeinikov 2022-02-23 09:13:27 +10:00 committed by GitHub
parent 688a49abb9
commit 5d3bffe651
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -131,6 +131,12 @@ VyOS ESP group has the next options:
* ``enable`` enable IPComp compression;
* ``life-bytes`` ESP life in bytes <1024-26843545600000>.
Number of bytes transmitted over an IPsec SA before it expires;
* ``life-packets`` ESP life in packets <1000-26843545600000>.
Number of packets transmitted over an IPsec SA before it expires;
* ``lifetime`` ESP lifetime in seconds <30-86400> (default 3600).
How long a particular instance of a connection (a set of
encryption/authentication keys for user packets) should last,