Dan Harkins wrote: > Just phase 1. For the IPSec SAs it makes sense. But I don't see a > point in doing it for the IKE SA negotiated in phase 1. > > Dan. > I agree, this option (IKE SA KB rekeying) should be abolished. It just makes interoperability harder.