128; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; 000 "ecs": retransmit-interval: 500ms; retransmit-timeout idtype: ID_FQDN; their id=@ipsec-02 000 "ecs": liveness: active; dpdaction:restart; dpddelay:60s; retransmit-timeout