[strongSwan] Questions about configuring SA lifetimes

[Michael Wages]

Noel,

Thanks for the response. Do you know if I can differentiate between the
different SA timeouts. Like can I have each of the four I listed set to a
different lifetime?

Thanks,

*Michael Wages*
Firmware Engineer
+1 859 825 4470
michael.wages at lexmark.com
<http://www.lexmark.com>
www.lexmark.com

On Fri, Jan 6, 2017 at 11:08 AM, Noel Kuntze <noel at familie-kuntze.de> wrote:

> On 06.01.2017 15:02, Michael Wages wrote:
> > I'm fairly certain I can configure the IKEv1 Phase 1 SA and IKEv2 SA via
> the lifetime (or lifebytes / lifepackets) option in ipsec.conf. I'm not
> entirely sure how to configure the lifetime of the IKEv2 Phase 2 SA and the
> IKEv2 Child SA (or if those options even exist). Any help would be
> appreciated.
>
> They're the same.
>
> --
>
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170106/a4259611/attachment.html>