Configure IPsec Tunnel Parameters - rekey

Information

By default, IKE keys are refreshed every 4 hours (14,400 seconds). You can change the rekeying interval to a value from 30 seconds through 14 days (1209600 seconds).

See https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge-20-x/security-book/config-sec-param.html for more information.

Solution

vEdge(config-interface-ipsecnumber)# ipsec
vEdge(config-ipsec)# rekey seconds

To force the generation of new keys for an IPsec tunnel, issue the request ipsec ipsec-rekey command.

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-4

Plugin: Cisco_Viptela

Control ID: b941ab4586260a788e27c9679b2ae1652ec25281d33f432b08bd38aa34921a30