Date: Wed, 15 May 2002 21:02:14 -0700 (PDT) From: Jerry Murdock <jerry_murdock@yahoo.com> To: FreeBSD-Security@FreeBSD.org Subject: Racoon SA Hard/Soft Lifetimes Message-ID: <20020516040214.97098.qmail@web14606.mail.yahoo.com>
next in thread | raw e-mail | index | archive | help
Is the Soft lifetime limit configurable for Racoon generated SA's? I've googled around, but can't find anything on this. I've successfully got a 2day old -Stable build to talk IPSEC/IKE with a Sonicwall, but things fall apart when the SAs hit the soft lifetime limit. A new SA is successfully negotiated with the Sonicwall when the soft lifetime runs out, but the Sonicwall then ignores anything coming into it on the "old" SA(which FBSD uses until the hard lifetime runs out). The result that no traffic passes for 20% of the SA's lifetime. I need FBSD to either switch immediately to the new SA, or bump the Soft lifetime limit up to the hard lifetime. A few seconds of dropped packets every 4 hours of so can be tolerated. I hope I'm being dense and someone will tell me what I'm missing. Thanks, Jerry __________________________________________________ Do You Yahoo!? LAUNCH - Your Yahoo! Music Experience http://launch.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020516040214.97098.qmail>