I am trying to understand what happens after an IPSEC SA reaches its Lifetime. I know that another SA is established before the previous SA goes down but is there a new key used on this SA, if IKE is configured with pre-shared keys. Thanks