topic Re: ipsec vpn both primary and secondary both firewall tunnels are up in General Topics

ipsec vpn both primary and secondary both firewall tunnels are up

bit_byte — Sun, 28 Jun 2020 14:59:47 GMT

passive firewall
Active firewall.
===============================================
we did failover from secondary firewall to primary.
After failover Primary firewall all vpn tunnels came up and On passive firewall tunnel info up.
is it normal behavior on passive firewall tunnel info up ?
or passive firewall tunnle info and IKe info should down ?

active firewall below image ..

passive firewall below image we can able to see IKE info is down but tunnel info is up .

passive firewall I think both IKE and tunnel should be down.

is that normal on the passive firewall tunnel info up?

or GUI error?

Re: ipsec vpn both primary and secondary both firewall tunnels are up

MP18 — Sun, 28 Jun 2020 21:19:56 GMT

@bit_byte

We also have Active Passive Setup with IPSEC tunnel.

On passive PA we have all the Tunnel interface show as up.

Also status is green.

This is by design.

Re: ipsec vpn both primary and secondary both firewall tunnels are up

SutareMayur — Wed, 01 Jul 2020 11:53:12 GMT

@bit_byteYes, this is normal behavior as all active IPSEC SAs gets copied/syned to passive firewall from Active via HA2 link.

Mayur