[Openswan Users] question about ike_life/ipsec_life

Agent Smith news8080 at yahoo.com
Tue Sep 27 06:36:57 CEST 2005

This might be a dumb question but I've read the man
page twice and just want to make sure what I
understand is correct.

ike_life is set by the keyword ikelifetime which is
phase 1 timeout (maximum supported is 8 hr.)

ipsec_life is set by keylife keyword and that is phase
2 timeout.

phase 2 timeout is typically less then phase 1


Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 

More information about the Users mailing list