topic Re: Set permanent IPSec VPN tunnel in General Topics

Set permanent IPSec VPN tunnel

Marek_Hudak — Thu, 05 Dec 2019 08:14:10 GMT

Hello guys,

would you be so kind and help me with any function, which can set VPN tunnel as a permanent one? Because when tunnel is not using, it goes down and then it will not come up without push on our side.

So, maybe there is some function / algorithm which will send over the tunnel small amount of data to keep it alive. I was not able to find it.

Thank you in advance 🙂

Re: Set permanent IPSec VPN tunnel

rdonohoe23 — Thu, 05 Dec 2019 09:59:34 GMT

Hi Mate,

Set up tunnel monitoring maybe. Sends small amount of monitoring traffic over the tunnel. Give your tunnel interfaces an IP. Some reference for TM below.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/vpns/set-up-site-to-site-vpn/set-up-tunnel-monitoring.html

You could also use path monitoring on the virtual router to poll an address the other side of a tunnel or anything else for that matter.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/static-routes/configure-path-monitoring-for-a-static-route.html

cheers

Rob