If I have 24 hours on phase 1 and 1 hour on phase 2 , if there is no activity for a while, will the tunnel still up for 24 hours?
The timers are based on when things are initially negotiated.
Phase 1 is for authenticating the endpoints, Phase 2 is for the actual tunnel.
Every hour (assuming there is activity), the Phase 2 tunnel is (re)negotiated.
Every 24 hours (if there is activity), Phase 1 is redone (which requires more CPU).
The one thing you need to make sure is these timers are the same on both ends, or you will have issues.
Retrieving data ...