https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260849#M73941 <P>I would have to say its the other side. However it could be a good idea to review all the settings from both sides just to be sure. I know with Cisco the tunnels go down if there is not traffic going over them, could this be the case?</P><P>&nbsp;</P> Mon, 13 May 2019 22:00:37 GMT OtakarKlier 2019-05-13T22:00:37Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260573#M73859 <P>Seems PA was responder and tunnel went down today at<STRONG> 9.29.22&nbsp; MST</STRONG></P><P>below are logs</P><P>&nbsp;</P><P>&nbsp;</P><P>We were responder so we should know the reason for tunnel going down</P><P>&nbsp;</P><P>72%2019-05-10 09:28:16.772 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).<BR />2019-05-10 09:28:17.334 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:18.974 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:21.782 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).<BR />2019-05-10 09:28:22.576 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:24.341 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:26.791 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).<BR />2019-05-10 09:28:27.889 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:29.686 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:31.794 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).<BR />2019-05-10 09:28:33.218 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:35.052 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:36.822 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=62c9b46a9f36df3e 9df9f7aad21a9e9c (size=16).<BR />2019-05-10 09:28:38.550 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:40.365 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:43.875 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:46.076 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:49.607 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:51.117 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:54.647 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:28:56.728 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:28:59.688 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:02.060 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:04.911 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:07.402 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:10.275 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:13.150 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:15.623 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:18.190 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:20.936 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).</P><P>&nbsp;</P><P>2019-05-10 09:29:22.151 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xF8625A58 &lt;====<BR />2019-05-10 09:29:23.230 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:26.285 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:29.022 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:29.422 -0600 [PERR]: { 14: }: received notify payload is not encrypted<BR />2019-05-10 09:29:31.630 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:32.092 -0600 [PERR]: { 14: }: received notify payload is not encrypted<BR />2019-05-10 09:29:34.335 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:36.958 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:39.772 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:40.082 -0600 [PERR]: { 14: }: received notify payload is not encrypted<BR />2019-05-10 09:29:42.301 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:45.104 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:47.670 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:29:50.723 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:52.000 -0600 [INFO]: { 14: }: ====&gt; PHASE-1 SA DELETED &lt;====<BR />====&gt; Deleted SA: 198.x.x.x[500]-173.181.2.2[500] cookie:62c9b46a9f36df3e:9df9f7aad21a9e9c &lt;====<BR />2019-05-10 09:29:52.000 -0600 [INFO]: { 14: 105}: DPD down, rekey vpn tunnel &lt;CoC-YYC_13:YYC_13&gt;<BR />2019-05-10 09:29:52.000 -0600 [INFO]: { 14: 105}: IPsec-SA request for 173.181.2.2 queued since no phase1 found<BR />2019-05-10 09:29:52.000 -0600 [PNTF]: { 14: }: ====&gt; PHASE-1 NEGOTIATION STARTED AS INITIATOR, MAIN MODE &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] cookie:1280d35d5ee7f17f:0000000000000000 &lt;====<BR />2019-05-10 09:29:52.042 -0600 [INFO]: { 14: }: received Vendor ID: DPD<BR />2019-05-10 09:29:52.733 -0600 [INFO]: { 14: }: received Vendor ID: DPD<BR />2019-05-10 09:29:52.733 -0600 [PNTF]: { 14: }: ====&gt; PHASE-1 NEGOTIATION SUCCEEDED AS INITIATOR, MAIN MODE &lt;====<BR />====&gt; Established SA: 198.x.x.x[500]-173.181.2.2[500] cookie:1280d35d5ee7f17f:dbc63d501c9b169d lifetime 3600 Sec &lt;====<BR />2019-05-10 09:29:52.733 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xE7D2F16C &lt;====<BR />2019-05-10 09:29:52.735 -0600 [PNTF]: { 14: }: notification message 24578:INITIAL-CONTACT, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:29:52.994 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />72%2019-05-10 09:29:55.773 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:29:57.214 -0600 [INFO]: { 7: }: IKE IPSEC KEY_DELETE recvd: SPI:0x9826AC36.<BR />2019-05-10 09:29:57.214 -0600 [PNTF]: { : 50}: ====&gt; IPSEC KEY DELETED &lt;====<BR />====&gt; Deleted SA: 198.x.x.x[500]-69.46.98.132[500] SPI:0xA700DF91/0x9826AC36 &lt;====<BR />2019-05-10 09:29:57.214 -0600 [INFO]: { 7: 50}: SADB_DELETE proto=0 src=198.x.x.x[500] dst=69.46.98.132[500] ESP spi=0xA700DF91<BR />2019-05-10 09:29:57.732 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:29:58.303 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:00.842 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:02.803 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:03.618 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:06.277 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:07.843 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:08.925 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:11.796 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:12.912 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:14.290 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:17.189 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:17.982 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:19.616 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:22.291 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:23.000 -0600 [PNTF]: { : 105}: ====&gt; PHASE-2 NEGOTIATION FAILED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Failed SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xE7D2F16C &lt;==== Due to negotiation timeout.<BR />2019-05-10 09:30:23.022 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:25.343 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:26.151 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xCF1BFF5E &lt;====<BR />2019-05-10 09:30:27.362 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:28.092 -0600 [PNTF]: { 14: }: notification message 36137:R-U-THERE-ACK, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:28.102 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:30.382 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:33.182 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:33.282 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:35.423 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:38.282 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:38.783 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:40.679 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:43.482 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:44.121 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:46.006 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:48.522 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:49.220 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:51.317 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:53.582 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:54.260 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:30:56.000 -0600 [PNTF]: { : 105}: ====&gt; PHASE-2 NEGOTIATION FAILED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Failed SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xCF1BFF5E &lt;==== Due to negotiation timeout.<BR />2019-05-10 09:30:56.637 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:30:58.151 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xF380AD14 &lt;====<BR />2019-05-10 09:30:58.662 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:30:59.670 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:01.042 -0600 [PNTF]: { 14: }: notification message 36137:R-U-THERE-ACK, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:01.977 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:03.742 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:05.096 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:07.331 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:08.832 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:10.457 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:12.700 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:13.892 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />72%2019-05-10 09:31:15.806 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:18.020 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:18.933 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:21.160 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:23.414 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:23.972 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:26.881 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:28.000 -0600 [PNTF]: { : 105}: ====&gt; PHASE-2 NEGOTIATION FAILED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Failed SA: 198.x.x.x[500]-173.181.2.2[500] message id:0xF380AD14 &lt;==== Due to negotiation timeout.<BR />2019-05-10 09:31:28.949 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:29.012 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:30.151 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0x3E37A95A &lt;====<BR />2019-05-10 09:31:31.951 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:33.042 -0600 [PNTF]: { 14: }: notification message 36137:R-U-THERE-ACK, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:34.052 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:34.279 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:36.991 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:39.122 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:39.591 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:42.031 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:44.222 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:45.339 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:47.071 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:49.262 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:50.379 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:52.374 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:54.312 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:31:55.419 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:31:57.724 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:31:59.362 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:00.000 -0600 [PNTF]: { : 105}: ====&gt; PHASE-2 NEGOTIATION FAILED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Failed SA: 198.x.x.x[500]-173.181.2.2[500] message id:0x3E37A95A &lt;==== Due to negotiation timeout.<BR />2019-05-10 09:32:00.649 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:02.152 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0x622B329C &lt;====<BR />2019-05-10 09:32:03.064 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:04.452 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:05.032 -0600 [PNTF]: { 14: }: notification message 36137:R-U-THERE-ACK, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:05.966 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:08.404 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:09.492 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:11.100 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:13.737 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:14.532 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:16.140 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:19.076 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:19.602 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:21.387 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:24.402 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:24.682 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:26.795 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:29.556 -0600 [PNTF]: { 15: }: ====&gt; PHASE-1 NEGOTIATION STARTED AS RESPONDER, MAIN MODE &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.182.30.4[500] cookie:febcaa4ede9be7e8:5fc509003461e403 &lt;====<BR />2019-05-10 09:32:29.556 -0600 [INFO]: { 15: }: received Vendor ID: FRAGMENTATION<BR />2019-05-10 09:32:29.556 -0600 [INFO]: { 15: }: received Vendor ID: DPD<BR />2019-05-10 09:32:29.762 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:29.826 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:31.144 -0600 [PNTF]: { 15: }: ====&gt; PHASE-1 NEGOTIATION SUCCEEDED AS RESPONDER, MAIN MODE &lt;====<BR />====&gt; Established SA: 198.x.x.x[500]-173.182.30.4[500] cookie:febcaa4ede9be7e8:5fc509003461e403 lifetime 3600 Sec &lt;====<BR />72%2019-05-10 09:32:32.000 -0600 [PNTF]: { : 105}: ====&gt; PHASE-2 NEGOTIATION FAILED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Failed SA: 198.x.x.x[500]-173.181.2.2[500] message id:0x622B329C &lt;==== Due to negotiation timeout.<BR />2019-05-10 09:32:32.124 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:33.042 -0600 [PNTF]: { 15: }: ====&gt; PHASE-2 NEGOTIATION STARTED AS RESPONDER, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.182.30.4[500] message id:0xB8748E09 &lt;====<BR />2019-05-10 09:32:33.460 -0600 [PNTF]: { : 104}: ====&gt; PHASE-2 NEGOTIATION SUCCEEDED AS RESPONDER, (QUICK MODE) &lt;====<BR />====&gt; Established SA: 198.x.x.x[500]-173.182.30.4[500] message id:0xB8748E09, SPI:0xD07E0C08/0x079B092D &lt;====<BR />2019-05-10 09:32:33.460 -0600 [INFO]: { 15: 104}: SADB_UPDATE proto=255 173.182.30.4[500]=&gt;198.x.x.x[500] ESP tunl spi 0xD07E0C08 auth=SHA1 enc=AES256/32 lifetime soft 3600/0 hard 3600/0<BR />2019-05-10 09:32:33.460 -0600 [INFO]: { 15: 104}: SADB_ADD proto=255 198.x.x.x[500]=&gt;173.182.30.4[500] ESP tunl spi 0x079B092D auth=SHA1 enc=AES256/32 lifetime soft 3233/0 hard 3600/0<BR />2019-05-10 09:32:33.460 -0600 [INFO]: { 15: 104}: IPsec-SA established: ESP/Tunnel 173.182.30.4[500]-&gt;198.x.x.x[500] spi=3497921544(0xd07e0c08)<BR />2019-05-10 09:32:33.460 -0600 [PNTF]: { : 104}: ====&gt; IPSEC KEY INSTALLATION SUCCEEDED &lt;====<BR />====&gt; Installed SA: 198.x.x.x[500]-173.182.30.4[500] SPI:0xD07E0C08/0x079B092D lifetime 3600 Sec lifesize unlimited &lt;====<BR />2019-05-10 09:32:34.151 -0600 [PNTF]: { 14: 105}: ====&gt; PHASE-2 NEGOTIATION STARTED AS INITIATOR, (QUICK MODE) &lt;====<BR />====&gt; Initiated SA: 198.x.x.x[500]-173.181.2.2[500] message id:0x5EA49518 &lt;====<BR />2019-05-10 09:32:34.802 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:35.183 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:36.488 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=febcaa4ede9be7e8 5fc509003461e403 (size=16).<BR />2019-05-10 09:32:37.032 -0600 [PNTF]: { 14: }: notification message 36137:R-U-THERE-ACK, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:37.434 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:39.922 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=1280d35d5ee7f17f dbc63d501c9b169d (size=16).<BR />2019-05-10 09:32:40.594 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=6ead43473fecbe99 a6cdc05588bb880d (size=16).<BR />2019-05-10 09:32:41.831 -0600 [PNTF]: { 15: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=febcaa4ede9be7e8 5fc509003461e403 (size=16).<BR />2019-05-10 09:32:42.867 -0600 [PNTF]: { 12: }: notification message 36136:R-U-THERE, doi=1 proto_id=1 spi=4b64490b7df3613a 9721dc116a4a22e2 (size=16).<BR />2019-05-10 09:32:44.962 -0600 [PNTF]: { 14: }: notification message 36136:R-U-THERE, doi=1 proto_id</P> Fri, 10 May 2019 21:22:07 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260573#M73859 MP18 2019-05-10T21:22:07Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260582#M73860 <P>Hello,</P><P>The responder is valuable when building a tunnel, It wont exactlyu tell you why it went down. Looks like a lot of DPD R-U-THERE packets. Maybe a tech support call could help?</P><P>&nbsp;</P><P>Regards,</P> Fri, 10 May 2019 22:05:35 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260582#M73860 OtakarKlier 2019-05-10T22:05:35Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260616#M73870 <P>Tech says issue with vendor side.</P><P>we did the PCAP and do not see any reply for Phase 2 Quick mode from vendor side.</P><P>&nbsp;</P><P>Also we have both phase 1 and 2 timer same.</P><P>Can this be cause of issue?</P> Sat, 11 May 2019 16:45:14 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260616#M73870 MP18 2019-05-11T16:45:14Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260764#M73917 <P>Hello,</P><P>Having the same or similar settings for phase 1 and 2 would not cause this.</P><P>&nbsp;</P><P>Regards,</P> Mon, 13 May 2019 15:19:07 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260764#M73917 OtakarKlier 2019-05-13T15:19:07Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260777#M73923 <P>Seems Rebooting vendor device always fixed the issue</P><P>And PA is resonder when vendor reboots there device</P><P>&nbsp;</P><P>Any thoghts on that?</P> Mon, 13 May 2019 16:02:35 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260777#M73923 MP18 2019-05-13T16:02:35Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260849#M73941 <P>I would have to say its the other side. However it could be a good idea to review all the settings from both sides just to be sure. I know with Cisco the tunnels go down if there is not traffic going over them, could this be the case?</P><P>&nbsp;</P> Mon, 13 May 2019 22:00:37 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260849#M73941 OtakarKlier 2019-05-13T22:00:37Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260934#M73970 <P>All Phase 1 and 2 settings are same.</P><P>We have configured DPD on both ends</P><P>&nbsp;</P><P>On PA we have tunnel monitor enable that pings the LAN Side of the tunnel so that rules out traffic option.</P><P>Also When we reboot the vendor device then PA is always the responder.</P> Tue, 14 May 2019 15:36:44 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/260934#M73970 MP18 2019-05-14T15:36:44Z https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/261654#M74179 <P>We have configured the PA&nbsp; in PAssive&nbsp; Mode since then we have no issues so far.</P><P>&nbsp;</P><P>Now PA will never be initator&nbsp;</P> Mon, 20 May 2019 15:08:34 GMT https://live.paloaltonetworks.com/t5/general-topics/tunnel-went-down-while-pa-was-responder/m-p/261654#M74179 MP18 2019-05-20T15:08:34Z