pfSense

	'rekey_time',

	'Rekey Time',

	'number',

))->setHelp('Time, in seconds, before an IKE SA establishes new keys. This works without interruption. ' .

		'Only supported by IKEv2, and is recommended for use with IKEv2. ' .

		'Leave blank or enter a value of 0 to disable.');

	'reauth_time',

	'Reauth Time',

	'number',

))->setHelp('Time, in seconds, before an IKE SA is torn down and recreated from scratch, including authentication. ' .

		'This can be disruptive unless both sides support make-before-break and overlapping IKE SA entries. ' .

		'Supported by IKEv1 and IKEv2. Leave blank or enter a value of 0 to disable.');

	'over_time',

	'Over Time',

	'number',

))->setHelp('Hard IKE SA life time, in seconds, after which the IKE SA will be expired. ' .

		'This time is relative to reauthentication and rekey time. ' .

		'If left empty, defaults to 10% of whichever timer is higher (reauth or rekey)');