[strongSwan] Questions about configuring SA lifetimes

[Michael Wages]

Hello,

I need to configure some IPsec SA lifetimes. Specifically, IKEv1 Phase 1
SA, IKEv2 SA, IKEv2 Phase 2 SA, and IKEv2 Child SA.

I'm fairly certain I can configure the IKEv1 Phase 1 SA and IKEv2 SA via
the lifetime (or lifebytes / lifepackets) option in ipsec.conf. I'm not
entirely sure how to configure the lifetime of the IKEv2 Phase 2 SA and the
IKEv2 Child SA (or if those options even exist). Any help would be
appreciated.

Thanks,

*Michael Wages*
Firmware Engineer
+1 859 825 4470
michael.wages at lexmark.com
<http://www.lexmark.com>
www.lexmark.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170106/2e9863b8/attachment.html>