[Swan] Security Policy lifeitime

Paul Wouters pwouters at redhat.com
Thu Aug 15 16:51:10 EEST 2013


On Thu, 15 Aug 2013, Andy Johnson wrote:

> I am new to libreswan.
> Is there a way to define the lifetime of a Security Policy in libereswan?

See the man page for "ipsec.conf", specifically the entries for:

salifetime= (ipsec sa lifetime aka phase2 or child sa)
ikelifetime= (isakmp sa lifetime aka phase1 or parent sa)

Paul


More information about the Swan mailing list