connections {

   # update the rekey time for the IKE_SA for the first connections, so they
   # get replaced completely

   one-start {
      rekey_time = 42m
   }

   two-start {
      rekey_time = 42m
   }

   four-start {
      rekey_time = 42m
   }

   # for these connections, the rekey time for the children is updated, so the
   # IKE_SAs should remain

   one-start-child {
      children {
         one-start-child {
            rekey_time = 42m
         }
      }
   }

   two-start-child {
      children {
         two-start-child-1 {
            rekey_time = 42m
         }
         two-start-child-2 {
            rekey_time = 42m
         }
      }
   }

   four-start-child {
      children {
         four-start-child-1 {
            rekey_time = 42m
         }
         four-start-child-2 {
            rekey_time = 42m
         }
         four-start-child-3 {
            rekey_time = 42m
         }
         four-start-child-4 {
            rekey_time = 42m
         }
      }
   }
}
