The section 4.5 of RFC2407 says that the default SA life duration is 8 hours. Could someone tell me where the value is derived ? Regards, /Shoichi `NE' Sakane @ KAME project/ 4.5 IPSEC Security Association Attributes : Class Values : SA Duration : If unspecified, the default value shall be assumed to be 28800 seconds (8 hours).