authentication lifetime
Use authentication lifetime in RSVP view to set the global idle timeout for RSVP security associations.
Use authentication lifetime in RSVP neighbor view to set the idle timeout for RSVP security associations with an RSVP neighbor.
Use undo authentication lifetime to restore the default.
Syntax
authentication lifetime life-time
undo authentication lifetime
Default
The idle timeout for an RSVP security association is 1800 seconds.
Views
RSVP view
RSVP neighbor view
Predefined user roles
network-admin
Parameters
life-time: Specifies the RSVP security association idle timeout in the range of 30 to 86400 seconds.
Usage guidelines
When RSVP authentication is enabled, the device dynamically establishes security associations when receiving and sending RSVP messages.
To release memory resources, each security association has an idle timeout. When a security association is idle for the specified timeout time, the device deletes the security association. When the device sends or receives an authenticated RSVP message, it resets the idle timeout timer for the corresponding security association.
The RSVP authentication idle timeout can be configured in the following views:
RSVP view—Configuration applies to all RSVP security associations.
RSVP neighbor view—Configuration applies only to RSVP security associations with the specified RSVP neighbor.
Interface view—Configuration applies only to RSVP security associations established on the current interface.
An RSVP security association established by using the authentication key configured in a view uses the idle timeout configured in the same view.
A modification to the idle timeout affects only security associations established after the modification. To apply the new setting to existing security associations, you must execute the reset rsvp authentication command to delete and then re-establish the security associations.
Examples
# Set the global idle timeout to 100 seconds for RSVP security associations.
<Sysname> system-view [Sysname] rsvp [Sysname-rsvp] authentication lifetime 100
# Set the idle timeout to 100 seconds for the security associations with RSVP neighbor 1.1.1.9.
<Sysname> system-view [Sysname] rsvp [Sysname-rsvp] peer 1.1.1.9 [Sysname-rsvp-peer-1.1.1.9] authentication lifetime 100
Related commands
authentication challenge
authentication key
authentication window-size
display rsvp authentication
reset rsvp authentication
rsvp authentication challenge
rsvp authentication key
rsvp authentication lifetime
rsvp authentication window-size