[strongSwan] Parameters used for phase 1 and phase 2 re-negotiation

Meera Sudhakar mira.sudhakar at gmail.com
Tue Jan 31 10:04:10 CET 2012


I am a bit confused with the parameters "ikelifetime" and "lifetime". I
believe "ikelifetime" re-negotiates phase 1 according to the value we
assign it. What about "lifetime"? The strongSwan wiki says "how long a
particular instance of a connection (a set of encryption/authentication
keys for user packets) should last, from successful negotiation to expiry".
So is this also for phase 1?
In that case, what paramater should I use to re-negotiate phase 2?
Sorry if these questions seem silly :(

Thanks and regards,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20120131/0a546e9a/attachment.html>

More information about the Users mailing list