This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Recommandation for SA and IKE lifetime

Hello,
Does anyone has a good recommandation for the SA and IKE lifetime? Is there a security issue if the values are to high?


This thread was automatically locked due to age.
Parents Reply Children
  • So, if the timeout period is too long, and the tunnel dies on one side the other side will reestablish the tunnel not until after the period is over? Dead peer detection would than be a work-around for that?

    The problem is, that sometimes it takes too long to negotiate the keys and there ist no connection between the endpoints. If I now raise the period, the problems would decrease.