Re: IPsec Phase II SA active but not Phase I SA

Hi

Phase 1 (IKE) SAs have typically a smaller lifetime than Phase II (IPSEC) SAs, but only when the phase II is renegotiated or dropped and built up  the Phase-1 will be needed and reestablished

So this is "normal" behaviour

regards

alexander