[strongSwan] IKEv1 phase 1 and 2 timeouts

STRANSKY Rainer - Contractor rainer.stransky at external.thalesgroup.com
Mon Nov 28 19:42:25 CET 2011


The German "BSI Grundschutzhandbuch" requests that timeouts for the IKE phase 1 and 2 shall not be too large.
As an example 15 seconds for phase 1 and 10 seconds fore phase 2 are mentioned.

What is the reason for this ?
What are the configuration options in strongSwan for these timeout values ?

Regards

Rainer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20111128/06f0c50e/attachment.html>


More information about the Users mailing list