[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Unspecified Lifetime

To: bkavsan@ire-ma.com
Subject: Re: Unspecified Lifetime
From: Paul Koning <pkoning@xedia.com>
Date: Fri, 1 Oct 1999 15:04:59 -0400
Cc: ipsec@lists.tislabs.com
References: <199910011346.GAA08262@gallium.network-alchemy.com><37F4F464.C7258707@ire-ma.com>
Sender: owner-ipsec@lists.tislabs.com

>>>>> "Slava" == Slava Kavsan <bkavsan@ire-ma.com> writes:

 Slava> If you set lifetime to kilobytes (say 5KB), but then your
 Slava> session stops short of this limit (say at 4KB) - then without
 Slava> some large time-based lifetime limit it will be alive forever
 Slava> - I am not sure if I want this.

If you don't want that, don't specify it.  You can specify both limits
if you want both volume and time limits to apply.  But if you specify
only one, the logical interpretation is that only that parameter
affects when the SA goes away.

	paul

References:

Re: Unspecified Lifetime

From: "Derrell D. Piper" <ddp@network-alchemy.com>

Re: Unspecified Lifetime

From: Slava Kavsan <bkavsan@ire-ma.com>

Prev by Date: Re: New XAUTH draft
Next by Date: PMTU Discovery on Security Gateway
Prev by thread: Re: Unspecified Lifetime
Next by thread: help
Index(es):
- Main
- Thread