On Tue, Nov 20, 2007 at 08:46:28AM -0800, john decot wrote: > Hi, > > I have change life time in both side i.e 28800 sec but unlucky again. > [ > 2007-11-20 20:27:31: ERROR: ignore information because ISAKMP-SA has not been established yet. Do a tcpdump/wireshark and have a look at what's in that informational message... Yvan. -- NETASQ http://www.netasq.com