Project

General

Profile

Issue #3062

how to disable rekey caused by byte or packet

Added by zhonghai li 3 months ago. Updated 3 months ago.

Status:
Feedback
Priority:
Normal
Assignee:
-
Category:
configuration
Affected version:
5.3.5
Resolution:

Description

hi,

could you indicate me how to disable rekey caused by byte or packet?
I want rekey only caused by time.
does parameters in ipsec.conf below can make it?

lifebytes=0
lifepackets=0
marginbytes=0
marginpackets=0

thanks
zhonghai li

History

#1 Updated by Tobias Brunner 3 months ago

  • Category set to configuration
  • Status changed from New to Feedback

could you indicate me how to disable rekey caused by byte or packet?
I want rekey only caused by time.

Then just don't configure any limits for the other attributes (see ExpiryRekey).

does parameters in ipsec.conf below can make it?

I guess, not configuring them is fine too.

Also available in: Atom PDF