Content translations are temporarily unavailable due to site maintenance. We apologize for any inconvenience.
05-12-2019 04:43 AM
@MP18 wrote:why my PA is responder for Phase 1 and Initator for Phase 2?
Why not? 😛
For example if you have only 1 phase 2 tunnel and a timeout of 8 hours in phase 1 and 1 hour for phase 2. At 2 am the other side establishes a connection so phase 1 and 2 will be setup. At that time your PA is responder for phase 1 and 2. After exchanging some packets there is no longer a connection so phase 2 will time out. For example at 4 am your side wants to connect to the remote network. As phase 2 already timed out a new one needs to be created but phase 1 is still up. --> your PA is responder in phase 1 and initiator of phase 2
