On Tue, 1 Dec 2015, Michael Richardson wrote:
Yes, that would be an obvious place to look for CHILD SA lifetimes. I didn't think to look in 4301 for requirements on IKEv2.What about PARENT SA lifetimes? :-)
Those are not negotiated, so if any side cares they can re-authenticate the parent SA? Paul _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
