On Dec 14, 2020, at 11:16, Balaji Thoguluva <tbbalaji at gmail.com> wrote: > > > Hi Folks, > > What is the maximum configurable value of salifetime, ikelifetime, rekeymargin, rekeyfuzz? man ipsec.conf ? From my head, 24h for IKE, 8h for SA. Last two are percentages. Paul