On 2012-04-11, Christian Weisgerber <na...@mips.inka.de> wrote: > Andre Ruppert <a...@in-telegence.net> wrote: > >> is there any chance (perhaps in the future) to integrate lifetime >> parameters via ipsecctl --> ipsec.conf or will I be forced to keep on >> using isakmpd.conf? > > There is lifetime code in ipsecctl. I don't know if its absence > from the man page is an accidental omission or if the code is > incomplete. >
IIRC, it looks like it should work per-peer but can actually only be used to set lifetimes for the default peer. Examination of the output from ipsecctl -nvf /etc/ipsec.conf would confirm this.
