Prisma Access IPSEC tunnel timeout IKE phase-1/phase-2 negotiation is failed as responder....Due to timeout

nikoolayy1 — Sun, 07 Aug 2022 10:00:20 GMT

Hello to All,

I see a lot of failed IKE phase-1 negotiations or even IKE phase-2 negotiations Due to timeout even when I am looking the Panorama logs as the Prisma Access is the Responder. What I see in common is that many Remote Networks are using the same Service IP address.

This shouldn't be an issue as in the article below shows but maybe if too many locations connnect to the same Service IP address this could cause an issue.

https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/when-do-ip-addresses-change/compute-locations-and-ip-address-allocation-for-remote-networks

topic Prisma Access IPSEC tunnel timeout IKE phase-1/phase-2 negotiation is failed as responder....Due to timeout in Prisma Access Discussions

Prisma Access IPSEC tunnel timeout IKE phase-1/phase-2 negotiation is failed as responder....Due to timeout