Roy Pereira wrote:
I recognize the need to support both types, but the question is, am I required to support both types simultaneously? That is, if you send me 2 lifetime payloads together, one in kbytes and one in seconds, does this mean you want both values used, with the actual expiration based upon whichever occurs first?You should be able to support both expiry types for both phase 1 and phase 2 SAs.
Multiple occurrences of each expiry type is forbidden though.