I haven't really tried this out yet but is it possible to change the IKE rekey lifetime? I noticed you can setup different lifetimes for phase2 ipsec stuff however it appears that IKE/phase1 lifetimes are static for all tunnels? Just wondering I know this is an issue with some firewalls and overtime the tunnel will not re-establish if you do not have all set to the sametimes. Maybe I just haven't rtfm'ed enough yet though just wondering.
This thread was automatically locked due to age.
