[Openswan Users] question about ike_life/ipsec_life

[Agent Smith]

This might be a dumb question but I've read the man
page twice and just want to make sure what I
understand is correct.

ike_life is set by the keyword ikelifetime which is
phase 1 timeout (maximum supported is 8 hr.)

ipsec_life is set by keylife keyword and that is phase
2 timeout.

phase 2 timeout is typically less then phase 1
timeout.

correct?

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com