<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:10pt"><div style="" class="">Hi,</div><div style="" class=""><br style="" class=""></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">I am using StrongSwan version 5.1.1 with the following configuration.</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">Here I have clearly mentioned only rekey should happen at IKE/IPSec <br style="" class=""></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif;
background-color: transparent; font-style: normal;">lifetime expiry. IPSec lifetime expiry works as expected but when it</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">comes to IKE lifetime expiry I could see task activity as IKE_REKEY</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">and task queued as IKE_DELETE. After which IKE tunnel gets deleted.</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;"><br style="" class=""></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px;
font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">Please see the ipsec.conf used</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;"><br></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;"># ipsec.conf - strongSwan IPsec configuration file<br style="" class="">config setup<br style="" class=""> charondebug="ike 0, chd 2, cfg 2, net 3, enc 2, lib 2, mgr 2, knl 2 dmn -1"<br style="" class=""><br style="" class="">conn home<br style="" class=""> left=10.206.1.113<br style=""
class=""> leftid=00A0C6EB636E@picasso.com<br style="" class=""> leftauth=eap-md5<br style="" class=""> leftsourceip=%config<br style="" class=""> leftfirewall=yes<br style="" class=""> ike=3des-sha1-prfsha1-modp1024<br style="" class=""> esp=aes128-sha1<br style="" class=""> right=10.201.50.1<br style="" class=""> rightsubnet=0.0.0.0/0<br style="" class=""> rightid=picasso.com<br style="" class=""> rightauth=psk<br style="" class=""> auto=add<br style="" class=""> dpdtimeout=200s<br style="" class=""> dpdaction=clear<br style="" class=""> ikelifetime=3600<br style="" class=""> lifetime=36000<br
style="" class=""> reauth=no<br style="" class=""> rekeymargin=3m<br style="" class=""> keyingtries=1<br style="" class=""> keyexchange=ikev2<br style="" class=""><br style="" class="">Am I missing anything here so that IKE goes without re-authentication and only rekey should happen?</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;"><br></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;">Regards</div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif;
background-color: transparent; font-style: normal;">Ashok<br style="" class=""></div><div class="" style="color: rgb(0, 0, 0); font-size: 13.3333px; font-family: HelveticaNeue,Helvetica Neue,Helvetica,Arial,Lucida Grande,Sans-Serif; background-color: transparent; font-style: normal;"><br style="" class=""></div></div></body></html>