Security Basics mailing list archives

TR: IKE and IPSec SA Lifetimes.

From: "Alexandre Verriere" <alexandre.verriere () gmail com>
Date: Tue, 12 Aug 2008 11:04:44 +0200

HI all !

We are working with VPNs between Zyxel routers and we have a strange issue.

VPN dies and there are  IKE retransmit messages send until limit is reached.
BTW Im not the person who 
Configure  the routers and I noticed that IKE ans IPsec SA are set with the
same time value as 86400.

My question is: Usualy  IKE SA lifetime are greater than IPSec SA lifetimes,
and are theses settings responsible of the troubles we have?

Since we are in production environnement, I ask this question cause we have
50+ VPNS and Im struggling to find wheres the catch.

If anyone can help

Thanks in advance.

Alexandre Verriere.

Current thread:

TR: IKE and IPSec SA Lifetimes. Alexandre Verriere (Aug 12)
- Re: IKE and IPSec SA Lifetimes. ॐ aditya mukadam ॐ (Aug 13)
  - Message not available
    - RE: IKE and IPSec SA Lifetimes. Alexandre Verriere (Aug 13)
    - Re: IKE and IPSec SA Lifetimes. ॐ aditya mukadam ॐ (Aug 13)
  - Re: IKE and IPSec SA Lifetimes. Vibhore (Aug 18)
    - RE: IKE and IPSec SA Lifetimes. Alexandre Verriere (Aug 18)