[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
SA lifetime and key lifetime
Is it necessary to have two different lifetimes? It makes sense to have
different lifetimes when we refresh the keys when the key lifetime expires
based on some cached data that was established during SA negotiation.
However, in case of ISAKMP the procedure for modifying an SA is to delete
the SA and create a new SA, if I understand it correct. In this case, it
does not make sense to have two different lifetimes.
--Naganand
----------------------------------------------------------------
naganand@ftp.com
Tel #: (508)684-6743 (O)