L2L IPSEC Tunnels - How Often Do Initiators Attempt to Init?

[michaelmertens]

How often or where are the timers that dictate how often PAN-OS attempts to initiate/attempt IPSEC tunnels when first created, after reboot/power-loss, network loss, etc.?

Thank you!

Mike

[TomYoung]

Hi @michaelmertens ,

Similar to other firewalls, "The IPSec tunnel comes up only when there is an interesting traffic destined to the tunnel."  You can also manually initiate a tunnel via GUI or CLI.  See this URL under Interesting Traffic or On-Demand.  https://docs.paloaltonetworks.com/network-security/ipsec-vpn/administration/ipsec-vpn-basics/ipsec-v...

Thanks,

Tom