[strongSwan] Questions about configuring SA lifetimes

Michael Wages michael.wages at lexmark.com
Fri Jan 6 15:02:33 CET 2017


I need to configure some IPsec SA lifetimes. Specifically, IKEv1 Phase 1
SA, IKEv2 SA, IKEv2 Phase 2 SA, and IKEv2 Child SA.

I'm fairly certain I can configure the IKEv1 Phase 1 SA and IKEv2 SA via
the lifetime (or lifebytes / lifepackets) option in ipsec.conf. I'm not
entirely sure how to configure the lifetime of the IKEv2 Phase 2 SA and the
IKEv2 Child SA (or if those options even exist). Any help would be


*Michael Wages*
Firmware Engineer
+1 859 825 4470
michael.wages at lexmark.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170106/2e9863b8/attachment.html>

More information about the Users mailing list