Re: [Ipsec-tools-devel] racoon phase 2

[Phillip H. <ss...@gm...>]

On 7/11/07, Phillip Hellewell <ss...@gm...> wrote:
>
>
> Is there anything that would be causing the SA to expire after 6 minutes
> instead of 30?
>

Nevermind, I just misunderstood what was happening.  Looking at the spi
values helped me figure it out.  It "soft" expires after 24 minutes,
renegotiates, then "hard" expires after 30 minutes (6 minutes later).  That
sounds good to me.

Unfortunately, this means I've been chasing a red herring...  Oh well, back
to the drawing board.  I'm sure I'll figure out eventually why the tunnel is
being flaky.

Phillip