Method of confirming key updating time

The invention provides a method of confirming key updating time. The method comprises the following steps that S1, when an internet protocol security (IPSEC) tunnel conducts key updating time negotiation, the negotiation type of the IPSEC tunnel is judged; S2, the key updating time is confirmed according to the negotiation type of the IPSEC tunnel. According to the method of confirming the key updating time, the negotiation is conducted on the condition that internet key exchange (IKE) key updating time at two ends is inconsistent, and far-end switching-in can be prevented from going offline.