Hot answers tagged

1

Assuming you're using a setup similar to Openswan's ec2 example , try setting lifetime=1800 rekey=yes but only on the initiating end. This will set SA expiry and renegotiate to every 30 minutes.



Only top voted, non community-wiki answers of a minimum length are eligible