topic Re: ipsec tunnels freezing in PANOS 8.x on active passive configuration , when failoveris needed in General Topics

ipsec tunnels freezing in PANOS 8.x on active passive configuration , when failoveris needed

marce1000 — Wed, 06 Dec 2017 10:37:43 GMT

- We have been having issues with VPN tunnels freezing between PA's on different sites; since PANOS8.x when a failover is done in an active - passive configuration. Current workaround is to enable tunnel monitoring with failover action. This was not needed in PANOS 7.x, for these kind of situations. the failover works for all the rest of ongoing traffic towards the Internet, only the ipsec tunnel hangs, is this tunnel monitoring a REQUIRED setting in PANOS 8.x; or should it not failover stateless , as all the rest does ?

Re: ipsec tunnels freezing in PANOS 8.x on active passive configuration , when failoveris needed

BPry — Wed, 06 Dec 2017 13:59:18 GMT

@marce1000,

Is their a reason that you are not using tunnel monitoring at all? More of a question than anything else, I don't configure any IPSec tunnels without one.

I haven't had any issues with failover when running 8.0.x on any of my equipment, but like I said I already have tunnel monitoring configured.

Re: ipsec tunnels freezing in PANOS 8.x on active passive configuration , when failoveris needed

marce1000 — Wed, 06 Dec 2017 16:46:17 GMT

- Ok, but we fell upon this issue after upgrading to 8.x, I was wondering wether it became a required setting , since everything worked without tunnel monitoring in 7.x.