Skip to main content
A
Anonymous_User
Contributor
June 13, 2007
Question

IPSec VPN is going down

  • June 13, 2007
  • 2 replies
  • 5049 views
hi! Some time after bringing up an IPSec VPN, it comes down and I it gets up only when I send data from one side. Is there any way to keep it up permanently? thanks

    2 replies

    rwpatterson
    rwpatterson
    New Member
    June 13, 2007
    In your phase 1 definition, the advanced section near the bottom is an option " Keep Alive Interval" . Check this. Usually this will keep a tunnel up. I have seen tunnels drop with this on, but it' s better than nothing. Also in phase 2, there is again in the advanced section an " Auto Key Keep Alive" . Check this box as well. In the policy that allows tunnel traffic, the " Allow Inbound" and " Allow Outbound" determine which sides of the tunnel are allowed to begin negotiation to open it. I usually check both, because it' s secure, either side should be able to bring it up. Good luck
    romanr
    romanr
    New Member
    June 13, 2007
    ORIGINAL: Raquel hi! Some time after bringing up an IPSec VPN, it comes down and I it gets up only when I send data from one side. Is there any way to keep it up permanently? thanks
    Have a look into your logs! some configuration erros might lead to the fact, that only one of the Boxes is able to establish the IPSec-tunnel.
    A
    Anonymous_UserAuthor
    Contributor
    June 14, 2007
    Configuration was ok and I didnt see anything wrong in logs (still looking). Thanks for your quick replies If you have any other idea, I will be pleased to hear them
    abelio
    SuperUser
    abelio
    SuperUser
    June 14, 2007
    Raquel, if you want keep up the vpn even when there' s no traffic originated from hosts behind peers, you need put additional CLI commands as rwpatterson suggested above. We don' t know which FortiOS you' re running, and which vpn type you' ve configured. So, let assume fortios 3.0 and VPN policy or tunnel mode: in that case, 
      config vpn ipsec phase2    edit <name_of_your VPN_phase2>    set auto-negotiate enable  end
    If you' re under different fortios/vpn, update that info in the forum, so we can see it hope it helps,
    Terms & ConditionsAccessibility statement