Skip to main content
WDCB
WDCB
New Member
January 23, 2020
Question

Ipsec Interface down

  • January 23, 2020
  • 1 reply
  • 1810 views

Hi All - Newbie here

I am looking for a bit of guidance or KB's for how to bring up an Ipsec S2S interface. I have IPSec to Azure an every so often the interface will down. The Wan interface does not miss a beat and there is one other IPSec to a Forti that does not drop so its not failover. I can easily enough bring up the interface again with the IKE reset through CLI, but gui would not work. So I am looking for a way that I can use something like Link monitor to if the interface onthe VPN drop to simply execute a reset on that IPSec interface. I have set the Keep Alive settings, but it still goes down occasionally and requires reboot or manual reset. 

This is not a SD-Wan config, but perhaps it should be ? Issue is it is a single ISP connection with two IPSec on that. 

 

Guidance please or a pointer to a KB will help

 

Thanks in advance

    1 reply

    abarushka
    Staff
    abarushka
    Staff
    August 28, 2022

    Hello,

     

    I would like to ask whether auto-negotiate is enabled?

     

    https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-the-IPSec-auto-negotiate-and-keepalive/ta-p/189536?externalID=12069

    Terms & ConditionsAccessibility statement