topic Re: IPSEC VPN Needs to be disconnected when there is no traffic in General Topics

IPSEC VPN Needs to be disconnected when there is no traffic

snimshad — Wed, 01 Apr 2020 08:47:54 GMT

We have several IPSec tunnels that connect to 4G devices to provide network access in the event of a primary circuit outage. These tunnels do not disconnect after the primary circuit comes back up. Is there a way on the PAN side to disconnect an IPSec tunnel if there has been no traffic on it in a given amount of time?

we are using IKE V1 and static route

Re: IPSEC VPN Needs to be disconnected when there is no traffic

kiwi — Thu, 02 Apr 2020 15:58:33 GMT

Hi @snimshad ,

Have you set up some PBF failover ?

Can you add some more details on your config ?

-Kiwi.

Re: IPSEC VPN Needs to be disconnected when there is no traffic

snimshad — Wed, 08 Apr 2020 10:13:04 GMT

@kiwi

there is no pbf failover set up as of now...tunnel monitoring is in place to monitor the liveness of peer.

Re: IPSEC VPN Needs to be disconnected when there is no traffic

OtakarKlier — Thu, 09 Apr 2020 21:34:49 GMT

Hello,

Tunnel monitoring send pings across the tunnel. This is why it is always active. What I have done in the past is setup a PBF policy to use the main connection first and then the tunnel second.

Hope that helps.