IKE phase- 1 SA is expired every 10 seconds?

[tstores]

Just curious, has anyone every seen IKE phase-1 expiring every 10 seconds, can't seem to figure it out.

Thanks

[panos]

Maybe it is related to other side of the vpn ? did you check other side ? Also what is the device on the other side ?

[gafrol]

Yes I have seen that behavoiur when the peer was a cisco vpn device with the lifesize vpn parameter configured and set to a rather low value. So whatever comes first lifetime or lifesize, a rekey of the tunnel was initiated.

[dsp_DI]

Hello,

I am facing the same issue. Did you manage to know what was the reason for these IKE logs ?

Thanks

[gafrol]

Yes we were requesting the peer (Cisco VPN device) to change the lifesize parameter to max. That solved the issue.