[Users] ikelifetime and keylife

From: Catalin Borcea (catalin_at_electricant.ambra.ro)
Date: Tue Nov 05 2002 - 12:54:14 CET

• Next message: Jfabricio - Dep. TI: "*****SPAM***** [Users] One more beginner"
• Previous message: Cristina Carmona Salgueiro: "[Users] problem with win2k connection"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

If the ISAKMP SA is used to negotiate IPsec SA's why "ikelifetime" is
usually smaller than the "keylife"? I think that is worthless to negotiate
new ISAKMP SA's (main mode) without renegotiating new IPSEC SA's (quick
mode) because the purpose of ISAKMP SA is just to negotiate an IPSEC SA.
Where do I get wrong?

TIA
- catalin -

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

• Next message: Jfabricio - Dep. TI: "*****SPAM***** [Users] One more beginner"
• Previous message: Cristina Carmona Salgueiro: "[Users] problem with win2k connection"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Wed Nov 06 2002 - 05:20:36 CET