[strongSwan] Questions about configuring SA lifetimes

Noel Kuntze noel at familie-kuntze.de
Fri Jan 6 17:08:41 CET 2017

On 06.01.2017 15:02, Michael Wages wrote:
> I'm fairly certain I can configure the IKEv1 Phase 1 SA and IKEv2 SA via the lifetime (or lifebytes / lifepackets) option in ipsec.conf. I'm not entirely sure how to configure the lifetime of the IKEv2 Phase 2 SA and the IKEv2 Child SA (or if those options even exist). Any help would be appreciated.

They're the same.


Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 866 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170106/0d7ffb30/attachment.sig>

More information about the Users mailing list