Proxy ID

[infotech]

How can you tell what proxy ID's need to be configured on a PA that has VPN tunnels to a Cisco ASA 5505?

[hshah]

In cisco there is no test command to bring the tunnel, only way is the ping or any other interesting traffic.

In this situation ping will work.

[infotech]

The tunnel came up hulk when I pinged from a server on the cisco side to a server on the other side of the PA

[HULK]

Great news.

[infotech]

The ping test brought up the tunnel so what does that tell me? Course will it stay up that is the real question

[infotech]

But the question still remains will it stay up and how can I make it stable?

[HULK]

Hello Infotech,

Run a continuous PING from your server through the tunnel, and monitor the situation.

Thanks

[infotech]

Is there something I should be focusing on that would help me to resolve the issue?

[hshah]

Hi Infotech,

Tunnel is up, it will stay up as long as interesting traffic is there.

Tunnel will go down after re-key timeout in the abscense of interesting traffic.

You can find logs in Monitor > System Log for tunnel up/down event.

Regards,

Hardik Shah

[infotech]

This is the only tunnel that is experiencing this issue and I am not sure why

[hshah]

Can you provide more information in detail ?

[infotech]

what details do you need?

[hshah]

How often does tunnel fluctuates ?

[infotech]

Once a day it is up about 8 hours and down 12 - 16 hours

[hshah]

Hi Infotech,

Does traffic flows all the time, or this VPN tunnel is in LAB?

Regards,

Hardik Shah

[HULK]

Hello Infotech,

Would it be possible to open a ticket with PAN support and let them investigate this issue in depth.

Thanks