https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-question/m-p/599781#M119245 <P>If route is removed from virtual router then underlying tunnel will stay up until IPSec tunnel timeout.</P> Tue, 08 Oct 2024 12:51:10 GMT Raido_Rattameister 2024-10-08T12:51:10Z https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-question/m-p/599756#M119240 <P>Hello,</P> <P>&nbsp;</P> <P>I am trying to find out the logic about this scenario.</P> <P>&nbsp;</P> <P>If we have an ikev2 tunnel, and only a single /32 route in the routing table to reach the tunnel peer (assume dynamic routing for encryption domain), and for some reason that route gets retracted from the routing table, does the tunnel only go down once liveliness check fails, or does it go down immediately due to no route?</P> <P>&nbsp;</P> <P>Unfortunately, I currently don’t have the means to lab this, so I appreciate yall letting me know.</P> <P>&nbsp;</P> <P>Thanks!</P> Tue, 08 Oct 2024 02:05:49 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-question/m-p/599756#M119240 VK9H13 2024-10-08T02:05:49Z https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-question/m-p/599781#M119245 <P>If route is removed from virtual router then underlying tunnel will stay up until IPSec tunnel timeout.</P> Tue, 08 Oct 2024 12:51:10 GMT https://live.paloaltonetworks.com/t5/general-topics/vpn-tunnel-question/m-p/599781#M119245 Raido_Rattameister 2024-10-08T12:51:10Z