topic Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels in Next-Generation Firewall Discussions

Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

SteveBallantyne — Thu, 18 Jul 2024 17:41:05 GMT

Hello folks,

I am not sure when this happened but I suspect it when we upgraded to PAN-OS 11.1.3.

On my PA-3250 when I go into Network > IPSec Tunnels in PAN-OS, and then click either IKE Info or Tunnel Info, I am no longer able to restart the connections. The Refresh button is available but Restart is grayed out.

This is on all of my VPN tunnels and on "both ends" of the tunnels (I have around 10 other sites with PA-440's also running 11.1.3, and I see the same thing there).

I read through release notes, etc and couldn't find any indication of that cause of this. Does anyone have any ideas for me?

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

Adrian_Jensen — Thu, 18 Jul 2024 21:53:51 GMT

Stupid question... but have you selected the particular tunnel(IPSec)/IKE session (checkbox)? There may be one or multiple rows of IPSec/IKE info, depending on your setup. The refresh button refreshes all stats at the same time. But the restart button only affects the selected row(s) and is grayed out until at least one row is selected.

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

SteveBallantyne — Thu, 18 Jul 2024 21:56:17 GMT

Not a stupid question, at all! But yes, I did check the box first to select that row.

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

Adrian_Jensen — Thu, 18 Jul 2024 23:39:19 GMT

Had to ask... I once spent 5 minutes trying to figure out why I couldn't restart a session before I finally did the face-palm...

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

Akhil_B — Mon, 28 Oct 2024 16:18:11 GMT

I have the same problem, did you find solution to this problem?

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

SteveBallantyne — Mon, 28 Oct 2024 16:23:20 GMT

Support says, "The issue has been fixed on the upcoming PANOS 11.1.8 where the ETA for the PANOS is 11.1.8 is on 12/12".

Sadly we are only at 11.1.4 now. I don't know why that fix is so far out. 🙂

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

jblack — Fri, 13 Dec 2024 15:45:51 GMT

you can run the following on the CLI and it will restart the tunnel in question:

test vpn ipsec-sa tunnel <tunnel-name>

Re: Restart button is grayed out under both IKE Info and Tunnel Info on IPSec tunnels

TimWard — Thu, 10 Apr 2025 19:15:56 GMT

Thank you for your CLI command. Saved me a call to PA TAC 🙂