SECURITY ASSOCIATION RENEWAL AFTER SALIFETIME/ IKELIFETIME EXPIRE

Issue

• The ipsec tunnel's 'ikelifetime' expires before 'salifetime', where the Security Association Phase_2 refers to the expired Security Association Phase_1.

• The configuration in production environment is with ikelifetime set higher than salifetime for both NODE_A and NODE_B.

  ikelifetime=43200
  salifetime=1800