IPSec Down - Question

[rodrigosantos]

Hello,

I need help, my ipsec is always dropping at the same time
Estimated time is 7 minutes below.
This happens every day, from 9:08 am to 9:15 am.
This happens when we all get to work.

Thanks

[mshekh]

Hi @rodrigosantos ,

Thanks for providing information, as per provided information, IPSEC dropped at the same time.

May I check which phase is going down during the time of issue. is it phase one or phase 2 and what logs do you see in system logs and ikemgr logs.

Additionally please refer the below doc to troubleshoot the issue as provided information is not enough to assist with exact steps.

How to Troubleshoot IPSec VPN connectivity issues

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClivCAC

Best Regards,

Mohammad Talib

[rodrigosantos]

Hi @mshekh 

The problem appears to be occurring mainly in Phase 1, as there are repeated attempts to establish an IKE association that fail (with the message "message for a non-existing ike_sa").

However, I saw that this message IKEv2 IKE SA is down determined by DPD also appears in the system logs

Best Regards