topic Re: VPN Monitoring "tunel-status-down[up]" in General Topics

VPN Monitoring "tunel-status-down[up]"

qmso475 — Fri, 17 Mar 2023 07:16:02 GMT

Model: PA450

OS: 10.1.8

ipsec-tunnel is working well.

The corresponding logs are continuously occurring.

I don't know if it's because of the tunnel monitoring option.

Re: VPN Monitoring "tunel-status-down[up]"

Raido_Rattameister — Fri, 17 Mar 2023 12:13:37 GMT

Is 10.27.0.1 replying to pings continously?

Re: VPN Monitoring "tunel-status-down[up]"

OtakarKlier — Fri, 17 Mar 2023 14:32:06 GMT

Hello,

To expand on @Raido_Rattameister comment, the ping will source from the local tunnel IP to the IP you have set as the monitor IP. You need to have a policy in place to allow the traffic. Check the traffic logs to see if its getting blocked.

Regards,

Re: VPN Monitoring "tunel-status-down[up]"

PavelK — Wed, 10 May 2023 01:45:24 GMT

Hello @qmso475

this might be caused by below bug addressed in PAN-OS 10.1.10 released yesterday.

PAN-195251
Fixed an issue where IPSec tunnel re-keying generated the critical log message tunnel-status-up.

Kind Regards

Pavel