How long does PA stays as Responder in IPSEC connection

Reply
Highlighted
Cyber Elite

How long does PA stays as Responder in IPSEC connection

 

We have IPSEC from PA to vendor.

 

On GUI I see PA is responder

 

 

Does this mean that PA will remain as Responder until tunnel goes down   ?

 

If rekey happens for phase 1 and 2 will still PA remain as Responder?

 

 

MP
Tags (1)

Accepted Solutions
Highlighted
L7 Applicator

Re: How long does PA stays as Responder in IPSEC connection

it's the same principle as a TCP session

 

one site initiates the connection and the other end is the responder

once the tunnel is broken down, the system that initiates the new connection is the initiator

as long as the tunnel stays up and simply rekeys, the initiator remains the initiator

 

 

depending on your configuration one side could always be the initiator (one side is passive, all the connections come from one site, one site is dynamic and the other static...) or both could simply switch roles every so often

reaper - PANgurus.com
I drink and I know things

View solution in original post


All Replies
Highlighted
L7 Applicator

Re: How long does PA stays as Responder in IPSEC connection

it's the same principle as a TCP session

 

one site initiates the connection and the other end is the responder

once the tunnel is broken down, the system that initiates the new connection is the initiator

as long as the tunnel stays up and simply rekeys, the initiator remains the initiator

 

 

depending on your configuration one side could always be the initiator (one side is passive, all the connections come from one site, one site is dynamic and the other static...) or both could simply switch roles every so often

reaper - PANgurus.com
I drink and I know things

View solution in original post

Highlighted
Cyber Elite

Re: How long does PA stays as Responder in IPSEC connection

MAny thanks Reaper.

 

Wanna meet you at IGnite will you be there?

MP
Highlighted
L7 Applicator

Re: How long does PA stays as Responder in IPSEC connection

Unfortunately I will not be attending this edition, maybe next year ;)
reaper - PANgurus.com
I drink and I know things
Highlighted
Cyber Elite

Re: How long does PA stays as Responder in IPSEC connection

sorry to hear that

too bad

Anyone from this forum will be there?

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!