IPSec tunnel renegotiation with Watchguard Firebox

[admin_2]

We have an ipsec tunnel with a watchguard firebox 1000. We need to set our cisco pix to renegotiate every 24 hours in order to keep the tunnel from going inactive. What is the syntax, etc to have our cisco pix renegotiate automatically every 24 hours. Any help is appreciated. Thanks. Robbie

[gfullage]

Phase 1 defaults to every 24 hours, so you don't need to do anything there.

Phase 2 defaults to 8 hours, sp tp change this to 24 do:

> crypto ipsec security-association lifetime seconds 86400

It won't take effect until the tunnel is rebuilt after the 8 hour expiry timer, or you can manually clear them on both ends if you like.

[#3]

Thats what I thought from what I was seeing. Thanks for the info.