topic how long phase 1 will show as red in web gui? in General Topics

how long phase 1 will show as red in web gui?

MP18 — Wed, 01 May 2019 00:50:28 GMT

We have ipsec tunnel to vendor.

web gui shows phase 1 as down and phase 2 as up.

i can ping across the vendor network.

traffic is passing via tunnel

show vpn flow shows active.

need to know how long web gui will show phase 1 is red?

when web gui will show phase 1 as green?

Also from cli below command does not show that phase 1 is down?

show vpn ike-sa gateway name

Re: how long phase 1 will show as red in web gui?

BPry — Wed, 01 May 2019 01:07:02 GMT

@MP18,

This is the expected behavior. The IKE Gateway (or phase1) is only negotiated to help set up a secure process of negotiating the actual IPSec Tunnel (or phase2). The IKE Gateway will show red when Phase1 times out; prior to phase2 timing out, phase1 will re-negotiate and perform the necessary re-key. After the new negotiation, the IKE Gateway will show green until it ages out again, and goes back to red.

Re: how long phase 1 will show as red in web gui?

MP18 — Wed, 01 May 2019 01:10:09 GMT

Many thanks for solving this mystery

Great to learn from this community