Security Basics: TR: IKE and IPSec SA Lifetimes.

["Alexandre Verriere" <alexandre.verriere () gmail com>]

HI all !

We are working with VPNs between Zyxel routers and we have a strange issue.

VPN dies and there are  IKE retransmit messages send until limit is reached.
BTW I’m not the person who 
Configure  the routers and I noticed that IKE ans IPsec SA are set with the
same time value as 86400.

My question is: Usualy  IKE SA lifetime are greater than IPSec SA lifetimes,
and are theses settings responsible of the troubles we have?

Since we are in production environnement, I ask this question cause we have
50+ VPNS and I’m struggling to find where’s the catch.

If anyone can help…

Thanks in advance.

Alexandre Verriere.