ipsecGlobContP1Always

This object specifies whether a phase 1 rekeying is always
done immediately before phase 2 rekeying.
Note this is different from pfs for identity because the
latter discards the phase 1 SA immediately after phase 2
establishment.
This feature is mainly a compatibility flag for some
non-standard implementations which always expect a phase 1 SA
if a phase 2 SA exists. Please also select a longer lifetime
for phase 1 than phase 2 then.

MIB

FEC-IPSEC-MIB

OID

.0.11.69

Type

scalar

Access

readwrite

Status

current

Parent

ipsecGlobalsContinued