The ipsec-global-config subelement allows you to configure establish the parameters governing system-wide IPSec functions and behavior, including IPSec redundancy.

Parameters

red-ipsec-port

Enter the port on which the SBC should listen for redundancy IPSec synchronization messages

• Default: 0
• Values: 0 | 1994

red-max-trans

Enter the maximum number of redundancy transactions to retain on the active

• Default: 10000
• Values: Min: 0 / Max: 50000

red-sync-start-time

Enter the time in milliseconds before the system starts to send redundancy synchronization requests

• Default: 5000
• Min: 0 | Max: 999999999

red-sync-comp-time

Enter the time in milliseconds to define the timeout for subsequent synchronization requests once redundancy synchronization has completed

• Default: 1000
• Min: 0 | Max: 999999999

options

Enter the appropriate option name for the behavior you want to configure

Path

security-association is a subelement of the ipsec path. The full path from the topmost ACLI prompt is: configure terminal > security> ipsec>security-association.