Important: The commands or keywords/variables that are available are dependent on platform type, product version, and installed license(s).
Con figures the default lifetime for IPSec Child SAs derived from this crypto template. lifetime: 86400 seconds.list nameSpecifies the context configured IPsec transform set name to be used in the crypto template payload. This is a space-separated list. From 1 to 4 transform sets can be entered. name must be from 1 to 127 alpha and/or numeric characters.The following command configures IPsec transform sets named ipset1 and ipset2 to be used in this crypto template payload:ipsec transform-set list ipset1 ipset2lifetime secSpecifies the number of seconds for IPsec Child Security Associations derived from this crypto template payload to exist. sec must be an integer from 60 to 86400.lifetime 120maximum-child-sa numSpecifies the maximum number of IPsec child security associations that can be derived from a single IKEv2 IKE security association. num must be 1.Configures the TSi payload start-address to be that of the Mobile endpoint. This is the default value. endpoint is the mobile endpoint netmask.start-address<ipv4 address>end-address <ipv4 address>
![]() |
Cisco Systems Inc. |
Tel: 408-526-4000 |
Fax: 408-527-0883 |