topic Re: How long does PA stays as Responder in IPSEC connection in General Topics

How long does PA stays as Responder in IPSEC connection

MP18 — Thu, 09 May 2019 05:16:32 GMT

We have IPSEC from PA to vendor.

On GUI I see PA is responder

Does this mean that PA will remain as Responder until tunnel goes down ?

If rekey happens for phase 1 and 2 will still PA remain as Responder?

Re: How long does PA stays as Responder in IPSEC connection

reaper — Thu, 09 May 2019 14:14:44 GMT

it's the same principle as a TCP session

one site initiates the connection and the other end is the responder

once the tunnel is broken down, the system that initiates the new connection is the initiator

as long as the tunnel stays up and simply rekeys, the initiator remains the initiator

depending on your configuration one side could always be the initiator (one side is passive, all the connections come from one site, one site is dynamic and the other static...) or both could simply switch roles every so often

Re: How long does PA stays as Responder in IPSEC connection

MP18 — Thu, 09 May 2019 15:11:08 GMT

MAny thanks Reaper.

Wanna meet you at IGnite will you be there?

Re: How long does PA stays as Responder in IPSEC connection

reaper — Thu, 09 May 2019 16:34:59 GMT

Unfortunately I will not be attending this edition, maybe next year 😉

Re: How long does PA stays as Responder in IPSEC connection

MP18 — Thu, 09 May 2019 17:37:13 GMT

sorry to hear that

too bad

Anyone from this forum will be there?