[Ipsec-tools-devel] New SA establishment question of isakmpd

[<ya...@fu...>]

Hello,
     I have another question, that is, if I want to update my SA with 
new SP for the same tunnel, shall I write new SP into isakmpd.policy, 
new configurations into isakmpd.conf, then stop isakmpd daemon, then 
restart it to get new SA? Or isakmpd will re-negotiate for new SA 
periodically, without need to be restarted? Thank a lot.

                                        Best Regards, Shen Yan Ran