Set permanent IPSec VPN tunnel

[Marek_Hudak]

Hello guys,

would you be so kind and help me with any function, which can set VPN tunnel as a permanent one? Because when tunnel is not using, it goes down and then it will not come up without push on our side. 

So, maybe there is some function / algorithm which will send over the tunnel small amount of data to keep it alive. I was not able to find it.

Thank you in advance 🙂

[rdonohoe23 · Accepted solution]

Hi Mate, 

Set up tunnel monitoring maybe. Sends small amount of monitoring traffic over the tunnel. Give your tunnel interfaces an IP. Some reference for TM below. 

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/vpns/set-up-site-to-site-vpn/set-up-tunnel...

You could also use path monitoring on the virtual router to poll an address the other side of a tunnel or anything else for that matter. 

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/networking/static-routes/configure-path-mo...

cheers

Rob 

[Marek_Hudak]

Hi,

thank you for advice. We used just simple ICMP to keep it alive.

[Himank_htx]

@Marek_Hudak  Please can you describe the steps here to keep the tunnel up permanently using ICMP.

Thank you 

Himank  

[aabozaid]

Hi @rdonohoe23, 

should the destination IP from the other side be reachable ? or just an IP from the other side? 

thank u 

Abed