IKE lifetime seconds

James Comen <jcomen@torrentnet.com> Wed, 17 April 2002 21:13 UTC

Received: from lists.tislabs.com (portal.gw.tislabs.com [192.94.214.101]) by above.proper.com (8.11.6/8.11.3) with ESMTP id g3HLDNm03870; Wed, 17 Apr 2002 14:13:23 -0700 (PDT)
Received: by lists.tislabs.com (8.9.1/8.9.1) id QAA19886 Wed, 17 Apr 2002 16:08:22 -0400 (EDT)
Message-ID: <3CBDD917.834B01DE@torrentnet.com>
Date: Wed, 17 Apr 2002 16:20:39 -0400
From: James Comen <jcomen@torrentnet.com>
X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 2.2.2-RELEASE i386)
X-Accept-Language: en
MIME-Version: 1.0
To: ipsec@lists.tislabs.com
Subject: IKE lifetime seconds
Content-Type: multipart/alternative; boundary="------------E181AAE670B830A24719D4EA"
Sender: owner-ipsec@lists.tislabs.com
Precedence: bulk

When the ike protection suite lifetime is reached (either in time or
kb),
the IKE sa is deleted.
I've seen nothing that suggests that it should be automatically
renegotiated
like an ipsec SA.  I'm assuming that the IKE sa must be negotiated again

via the receipt of a packet which requires ipsec protection.
Is this correct, that there should be no automatic renegotiation of the
IKE sa?
Thanks
Jim

--
Jim Comen                           jcomen@torrentnet.com
Ericsson IP Infrastructure          Voice (919) 472 - 9932
920 Main Campus Drive, Suite 544    Fax   (919) 472 - 9999
Raleigh, NC 27606