summaryrefslogtreecommitdiff
path: root/docs/configuration/vpn/ipsec.rst
diff options
context:
space:
mode:
Diffstat (limited to 'docs/configuration/vpn/ipsec.rst')
-rw-r--r--docs/configuration/vpn/ipsec.rst6
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/configuration/vpn/ipsec.rst b/docs/configuration/vpn/ipsec.rst
index 7194057d..e079474f 100644
--- a/docs/configuration/vpn/ipsec.rst
+++ b/docs/configuration/vpn/ipsec.rst
@@ -131,6 +131,12 @@ VyOS ESP group has the next options:
* ``enable`` enable IPComp compression;
+* ``life-bytes`` ESP life in bytes <1024-26843545600000>.
+ Number of bytes transmitted over an IPsec SA before it expires;
+
+* ``life-packets`` ESP life in packets <1000-26843545600000>.
+ Number of packets transmitted over an IPsec SA before it expires;
+
* ``lifetime`` ESP lifetime in seconds <30-86400> (default 3600).
How long a particular instance of a connection (a set of
encryption/authentication keys for user packets) should last,