Hi Ed, > I added reauth=no to the config now. Lets see if it rekeys. It won't if you kept rekey=no in your config, that disables rekeying and reauthentication (all settings related to rekeying/lifetimes etc. are ignored). Regards, Tobias