IPSec Tunnels BGP Fluctuation Frequently

Jimmy20 — Fri, 04 Sep 2020 14:00:25 GMT

Hi All,

We have 04 IPSec VPN tunnels created on our PA FW with Public Cloud configured with BGP. (All these 04 Tunnels are created over single Internet link). All 04 peering IP of public cloud belongs to same region.

Pl note that these tunnels are in pair i.e. 02 tunnels are configured Active-Active (BGP) and redundant to each other to achieve the same purpose (lets say tunnel-1 & tunnel-2) and other 02 tunnels are also configured like same way for some other communication purpose (Eg, tunnel-3 and tunnel-4)

Recently experience a isolation due bgp down for a pair of tunnel's simultaneously (eg tunn-1 and tunn-2) .

We observed BGP peering of these 04 tunnels are getting frequently down (at-least once on everyday) during different time intervals i.e. all 04 tunnels BGP peering not going down at same time.

At first course of Investigation, everything looks normal at our end and looks there might me some issue at remote (public cloud) end but Not Sure.

Requesting if someone can share his/her thoughts here to diagnose further to get exact root cause of such BGP fluctuation on IPSec tunnel and if possible, what could be done to fix this behaviour.

We are running 9.0.4 firmware on PA.

Re: IPSec Tunnels BGP Fluctuation Frequently

Jimmy20 — Tue, 08 Sep 2020 16:57:58 GMT

Hi team, Can someone share his opinion here. Is BGP peering fluctuation on IPSec tunnels are normal.

topic Re: IPSec Tunnels BGP Fluctuation Frequently in General Topics

IPSec Tunnels BGP Fluctuation Frequently

Re: IPSec Tunnels BGP Fluctuation Frequently