I have two different IPSec VPN tunnels between a PAN and two different Cisco devices, let call them R1 and R2, as folllows: PAN IPSec IKEv1 <<---->> Cisco R2 IKEv1 PAN IPSec IKEv2 <<---->> Cisco R1 IKEv2 I enable Dead Peer Dection (DPD) in the IKE gateway between the PAN IKEv1 and Cisco R2 router. On the Dead Peer interval and retry, i set it to 5 and 5, respectively. On the Cisco router R2, I set "set crypto isakmp keepalive 10". On the IKE gateway between the PAN and Cisco R1 IKEv2, I set the "liveness check" to 5. I also set "crypto isakmp keepalive 10" on the R2 cisco router. Well, on the IKEv2 VPN tunnels, I see traffics every 5 seconds between the PAN and Cisco R2 even when there is no traffic going across the tunnel which is expected. However, I am not seeing traffics between the PAN and Cisco R1 even with DPD enable. Is that expected? If not, is this another bug in PAN? I am running 8.1.15 hotfix 3.
... View more
