IPsec SA lifetime…



  • Hi,

    When setting SA lifetimes on IPsecs VPN's, I have the option to select the lifetime in seconds but not in Kb?
    Am I missing something that needs to be enabled to allow this, or is the feature simply not there?

    Running pfSense 2.0-Release…

    Regards,
    Anders



  • AFAIK ipsec-tools used by pfsense doesn't support Security Association Lifetime by traffic volume, only by time.


  • Rebel Alliance Developer Netgate

    dhatz is correct, ipsec-tools, which is what we use for IPsec, does not support lifetimes by data size, only by time.



  • @jimp:

    dhatz is correct, ipsec-tools, which is what we use for IPsec, does not support lifetimes by data size, only by time.

    A little extra research on this topic reveals that it seems to be deprecated in racoon, ie. removed and I will therefore assume that it is not a feature that is coming (back)…


Locked