Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
05-08-2019 10:16 PM
We have IPSEC from PA to vendor.
On GUI I see PA is responder
Does this mean that PA will remain as Responder until tunnel goes down ?
If rekey happens for phase 1 and 2 will still PA remain as Responder?
05-09-2019 07:14 AM
it's the same principle as a TCP session
one site initiates the connection and the other end is the responder
once the tunnel is broken down, the system that initiates the new connection is the initiator
as long as the tunnel stays up and simply rekeys, the initiator remains the initiator
depending on your configuration one side could always be the initiator (one side is passive, all the connections come from one site, one site is dynamic and the other static...) or both could simply switch roles every so often
05-09-2019 07:14 AM
it's the same principle as a TCP session
one site initiates the connection and the other end is the responder
once the tunnel is broken down, the system that initiates the new connection is the initiator
as long as the tunnel stays up and simply rekeys, the initiator remains the initiator
depending on your configuration one side could always be the initiator (one side is passive, all the connections come from one site, one site is dynamic and the other static...) or both could simply switch roles every so often
05-09-2019 08:11 AM
MAny thanks Reaper.
Wanna meet you at IGnite will you be there?
05-09-2019 09:34 AM
05-09-2019 10:36 AM - edited 05-09-2019 10:37 AM
sorry to hear that
too bad
Anyone from this forum will be there?
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
