topic Re: Site to Site tunnels does not failover in General Topics

Site to Site tunnels does not failover

Rravella — Sun, 06 Mar 2016 04:28:40 GMT

Hi All,

We have several site to site VPN tunnels built for different clients. We have PA500 in HA mode. When we do a failover, general traffic does succesfully failover to secondary, but the VPN tunnels does not failover and all the tunnels shows down.

Any suggestions on how to resolve this.

Re: Site to Site tunnels does not failover

tsrivastav — Sun, 06 Mar 2016 06:13:59 GMT

All the Tunnels are between Palo Alto -- Palo Alto ? and kindly update the pan os version as .that would be helpful in finding the cause

Re: Site to Site tunnels does not failover

tsrivastav — Sun, 06 Mar 2016 06:30:20 GMT

Have you tried enabling/disabling DPD and kindly check in case you have enabled passive mode

disable the same and do the fail over to test the results

Re: Site to Site tunnels does not failover

Rravella — Mon, 07 Mar 2016 05:14:56 GMT

The issue seems to be with our cabling part in core switch. Our VPN tunnels go through a different ISP and the cable was connected to a different port in the switch, which resulted in failover not successfull. After changing the port, it started working.

Thank you guys.. for your suggestions.