[Openswan Users] question about ike_life/ipsec_life
news8080 at yahoo.com
Tue Sep 27 06:36:57 CEST 2005
This might be a dumb question but I've read the man
page twice and just want to make sure what I
understand is correct.
ike_life is set by the keyword ikelifetime which is
phase 1 timeout (maximum supported is 8 hr.)
ipsec_life is set by keylife keyword and that is phase
phase 2 timeout is typically less then phase 1
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
More information about the Users