SD -WAN Tunnel Being Down and Up Frequently

[Fariq_Zaidi]

Hi Support,

I need some advise on this SD-WAN tunnel being down and up frequently. How to troubleshoot and potential cause on it.

It was suddenly happen without any changes has been done on firewall.

Model: PA-820

Version: 10.1.6-h6

I attach the system logs that showing repeated interface and tunnel down message.

Please assist.

[PavelK]

Hello @Fariq_Zaidi

thanks for posting.

From the screen shot of the system log you provided, there is a path monitoring failure/recovery for default route along with log that SD-WAN tunnel is going down/up. My first suspect would be a link / ISP issue. If you have any monitoring tool to check health of links I would correlate it against time stamps of the logs to see you can pin point the issue.

Kind Regards

Pavel

[KLittletree]

I currently have issues with a handful of of sites with VPNs unstable.  I found a sometimes-fixe: if I can change the WAN IP to private to force NAT-T some of my links have become more stable.  first I checked to see if there is an arp entry in 192.168.x.x ( or whatever private address) and i change my ION to be in that subnet with corresponding default route.