topic Re: IPSEC Tunnel Secondary is always down in Prisma Access Discussions

IPSEC Tunnel Secondary is always down

DickyAnggara — Tue, 04 Mar 2025 09:07:37 GMT

We configured service connection with 2 tunnels in strata cloud manager, primary and secondary. The primary tunnel is up but the secondary tunnel is still down. For config proposals, phase1 and 2 are appropriate and match.

Is the behavior when the primary tunnel is up then the secondary is down?
or is there an anomaly with the secondary tunnel?

*no block or acl
*IPsec tunnel between sase prism and palo alto firewall

Translated with DeepL.com (free version)

Re: IPSEC Tunnel Secondary is always down

saahmed — Fri, 07 Mar 2025 19:44:21 GMT

This is normal behavior. The secondary tunnel will stay down as long as the primary is active.

Re: IPSEC Tunnel Secondary is always down

DickyAnggara — Sun, 09 Mar 2025 13:47:02 GMT

But we try disabled ipsec tunnel primary and wait for a few minutes, IP sec tunnel secondary isnt up.

Re: IPSEC Tunnel Secondary is always down

IrfanFras — Tue, 15 Apr 2025 18:07:35 GMT

Are you have config the tunnel monitoring?