<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">26.12.2018 11:13, valentin vlasov
пишет:<br>
</div>
<blockquote type="cite"
cite="mid:411086423.9215418.1545808396378@mail.yahoo.com">
<div>
<div id="yui_3_16_0_ym19_1_1545724308034_9248"><span
id="yui_3_16_0_ym19_1_1545724308034_9249">Hello Dmitry,</span></div>
<div id="yui_3_16_0_ym19_1_1545724308034_9250"><span
id="yui_3_16_0_ym19_1_1545724308034_9251"><br
id="yui_3_16_0_ym19_1_1545724308034_9252">
</span></div>
<div id="yui_3_16_0_ym19_1_1545724308034_9253"><span
id="yui_3_16_0_ym19_1_1545724308034_9254">1. I have the same
problem with a centos <> cisco asa connection with the
same behaviour.</span></div>
<div dir="ltr" id="yui_3_16_0_ym19_1_1545724308034_9255"><span
id="yui_3_16_0_ym19_1_1545724308034_9256">Can you tell me
please what are your final settings for </span><span
id="yui_3_16_0_ym19_1_1545724308034_9257">ikelifetime,
keylife and rekeymargin?</span></div>
</div>
</blockquote>
<p><span id="yui_3_16_0_ym19_1_1545724308034_9256"></span><span
id="yui_3_16_0_ym19_1_1545724308034_9257">ikelifetime the same
as configured on asa- 28800s</span></p>
<p><span id="yui_3_16_0_ym19_1_1545724308034_9257"><span
id="yui_3_16_0_ym19_1_1545724308034_9257">keylife and
rekeymargin - default values ( 8h and 9m if I remember
correctly) , i.e. not configured</span></span></p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:411086423.9215418.1545808396378@mail.yahoo.com">
<div>
<div id="yui_3_16_0_ym19_1_1545724308034_9258">2. With what
periodicity do you run that testing script?</div>
</div>
</blockquote>
<p><br>
</p>
<p>*/5 but I have backup channels, so if channel is not available
downtime will be just about 40s- ospf dead timer...</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>