Re: Renegotiations
Jean-Francois Dive <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
any time an SA pair is deleted and that some traffic need to be sent and
that the implementation support traffic based tunnel start. If you
suffer regular out of normal life{time|size} rekeys, you may want to
increase your debug level and see what cause the SA to get deleted if
not by regulart expiration. Maybe you want to check too what is the
outcome of the negotitation on both side lifetime wise: the standard is
not brightly clear about it and a lot of drafts/discussions exists and
implementors have a tendency to not see them all, this could cause logic
problems.
On Fri, Jan 02, 2004 at 02:11:25PM -0500, [email protected] wrote:
> Hello All
>
> Happy New Year!
>
> Does anyone know a list of causes for VPN renegotiation besides the hard
> limits that can be set at the firewall level (timeout, lifetime,
> datavolume)?
>
> Thanks,
> ~Todd
>
> __________________________________
> Todd M. Simons
> Senior MIS Engineer
> Dell Tier 1 PA Technician
> Delphi Technology, Inc.
> New Brunswick, NJ
>
> Note: The contents of this email do not constitute a legally binding
> commitment.
>
>
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn
--
-> Jean-Francois Dive
--> [email protected]
I think that God in creating Man somewhat overestimated his ability.
-- Oscar Wilde