I'm having some problems rekeying phase 1 whereby the tunnel drops at 75% of the p1 lifetime. The lifetime is currently at 43200 secs. I've enabled debugging and have a line in the logs stating that the rekey timer is set at 32400:Group = x.x.x.x, IP...

I was wondering what happens when a tcp conn is active and the phase 2 lifetime is reached? Would the tunnel be re-established and the tcp connection live on or would a fin or rst be generated by the firewall or would something else happen?