ipsec / ike kbyte lifetime

[Guest]

Howdy,
I am testing win-XP ipsec ineroperability with a product my company is
developing. I have noticed that the windows ipsec/ike configureation seems
to enforce a kbyte SA lifetime with out the ability to configure it.
Hopefully, I have been a fool and did not see how to manipulate the SA
kbyte lifetime... can anyone point out to me how to do this? I am using MMC
and "IPsecurity Policies" to configure my ipsec/ike.

I would like to set the SA kbyte lifetime to 0 (ie. off).

Ricky

 

[Mark Swift [MSFT]]

The SA lifetime settings are in the Security Method settings in the Filter
Action tab of the policy. But, we don't support turning off the SA lifetime.
You have to set a minimum, but you can set the lifetime really high.

--

Mark Swift
Software Test Engineer
IP Security
Windows Networking
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm