Re: VPN SA expires in a minute

2006-03-28 Thread Peter Heiner
>> I tried setting these with isakmpd.conf and sysctls, here's some > >I can't remember using sysctl for VPN tuning so far. I did that because I couldn't find any reference to enforce both time and volume limits. Believe me, I Googled my ass sore trying. >> Default-phase-1-lifetime=28800,60:

Re: VPN SA expires in a minute

2006-03-28 Thread Toni Mueller
Hello, On Sun, 26.03.2006 at 22:45:15 +0200, HEINER Piter <[EMAIL PROTECTED]> wrote: > I tried setting these with isakmpd.conf and sysctls, here's some I can't remember using sysctl for VPN tuning so far. > Default-phase-1-lifetime= 28800,60:28800 > Default-phase-2-lifetime= 28800,60:28

VPN SA expires in a minute

2006-03-26 Thread HEINER Péter
Hi all, I'd appreciate some help on the following: I have set up an OpenBSD 3.8 box as a VPN gateway, the other end is a Symantec enterprise firewall 7 box, which is not under my control. Tunnels get established and transfer data fine, but in under one minute the SA seems to become expired if