site to site ipsec vpn issue

simon2023 — Sat, 08 Oct 2022 11:47:28 GMT

PA 3260 and VM 300 set site to site ipsec vpn, The Ipsec vpn had been working.But from two days ago ,

it wasn't working ,can you help me to check it ?

admin@tfw001> tail follow yes mp-log ikemgr.log

tail follow yes mp-log ikemgr.log
2022-10-08 19:12:29.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:12:35.811 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:12:35.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:12:39.000 +0800 [DEBG]: 192.168.1.1[4500] - 4.96.1.109[4500]:(nil) 1 times of 1 bytes message will be sent over socket 1027
2022-10-08 19:12:41.812 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:12:41.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:12:47.811 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:12:47.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:12:53.812 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:12:53.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:12:59.000 +0800 [DEBG]: 192.168.1.1[4500] - 4.96.1.109[4500]:(nil) 1 times of 1 bytes message will be sent over socket 1027
2022-10-08 19:12:59.812 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:12:59.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:13:05.811 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:13:05.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:13:11.812 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:13:11.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)

2022-10-08 19:13:14.000 +0800 [DEBG]: 192.168.1.1[4500] - 4.96.1.109[4500]:(nil) 1 times of 288 bytes message will be sent over socket 1027
2022-10-08 19:13:17.812 +0800 [DEBG]: { : 4}: keyacquire received: 192.168.1.1[0] => 4.96.1.109[0]
2022-10-08 19:13:17.812 +0800 [DEBG]: { 2: 4}: 192.168.1.1[0] => 4.96.1.109[0]: Child SA key expire ignored: previous request still in progress, state WAIT_RESPONSE (req from path monitor)
2022-10-08 19:13:19.000 +0800 [DEBG]: 192.168.1.1[4500] - 4.96.1.109[4500]:(nil) 1 times of 1 bytes message will be sent over socket 1027

topic site to site ipsec vpn issue in Next-Generation Firewall Discussions

site to site ipsec vpn issue