Ipsec tunnel

4 replies
4023 views

Hi all! Can someone tell me why the ipsec tunnel itself falls everyday? maybe there is a time limit? i notice it in the morning
Tunnell between FortiGate 100F and Mikrotik

FortiGate

srajeswaranAnswer

Staff

Do you see anything on VPN events log? Is it going down when there is active traffic or during the idle time?

srajeswaranAnswer

Staff

Do you see anything on VPN events log? Is it going down when there is active traffic or during the idle time?

YerlikAuthor

Visitor III

i think it is going down during the idle time (at night when no one working). logs are not saved more 1 hour.

alif

Staff

hi @Yerlik,

You can enable auto-negotiation under phase2 settings which will keep the tunnel active at all times. Please refer to the below link for details.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Set-the-FortiGate-unit-to-bring-up-IPSec-VPN/ta-p/192442

srajeswaran

Staff

I think increasing the lifetime to more (~24 hours) along with higher idle-timeout could be tried.

ref: https://docs.fortinet.com/document/fortigate/7.2.3/administration-guide/790613/phase-1-configuration

IPsec tunnel idle timer

Define an idle timer for IPsec tunnels. When no traffic has passed through the tunnel for the configured idle-timeout value, the IPsec tunnel will be flushed.

To configure IPsec tunnel idle timeout:

config vpn ipsec phase1-interface     edit p1         set idle-timeout [enable | disable]         set idle-timeoutinterval <integer> IPsec tunnel idle timeout in minutes (10 - 43200).     next end

To configure IPsec tunnel idle timeout:

Sign up

Login with SSO

Login to the community

Login with SSO