IKE phase- 1 SA is expired every 10 seconds?

[tstores]

Just curious, has anyone every seen IKE phase-1 expiring every 10 seconds, can't seem to figure it out.

Thanks

[panos]

Maybe it is related to other side of the vpn ? did you check other side ? Also what is the device on the other side ?

[gafrol]

Yes I have seen that behavoiur when the peer was a cisco vpn device with the lifesize vpn parameter configured and set to a rather low value. So whatever comes first lifetime or lifesize, a rekey of the tunnel was initiated.

[dsp_DI]

Hello,

I am facing the same issue. Did you manage to know what was the reason for these IKE logs ?

Thanks

[gafrol]

Yes we were requesting the peer (Cisco VPN device) to change the lifesize parameter to max. That solved the issue.

[raghavendra.badiger]

I am facing same problem. Here is exact scenario I have:

IPSec Tunnel is built between 2 PA devices, all configuration is identical. I see the Phase-1 expires in 1 minute, has anyone notices the same problem?

Please help if you can, I have case with support already but no solution yet.

[v.brown304898]

Hello Raghavendra, please let me know if TAC ever solved this for you. I have a similar issue, every 2 minutes IKE and IPSEC delete and rekey.

[VTuran]

Hello v.brown304898,

Did you find the solution for the issue?

Regards,

[VTuran]

Hello raghavendra.badiger,

Did you find the solution for the issue?

Regards,

Preview