In IKEv2, two IKE Crypto profile values,
Key Lifetime
and
IKEv2 Authentication Multiple
, control the establishment
of IKEv2 IKE SAs. The key lifetime is the length of time that a negotiated IKE SA
key is effective. Before the key lifetime expires, the SA must be re-keyed;
otherwise, upon expiration, the SA must begin a new IKEv2 IKE SA re-key. The default
value is 8 hours.