Contributor III

Solved

S2S VPN VMWARE Edge

Forum|Forum|3 years ago
January 5, 2023
5 replies
2763 views

Hello Together

I have the following problem:

On the Fortigate, a couple of S2S VPN are made to a Vmware Edge Firewall.
One S2S VPN interrupts so every 45-48min but only for 2-3 seconds.
Phase 1 goes down + phase 2 goes down but comes right back up.
The other VPN configured exactly the same do not have this problem.

Does anyone know such problems?

Thanks for your help

FortiGate

Best answer by Christian_89

Was a problem on the part of Vmware Edge

Staff

Hello,

I would recommend to check logs VPN logs and check ike debug traces on FortiGate side once the issue is triggered.

diagnose debug application ike -1
diagnose debug enable

Staff

Normally phase2 timer you will have 60 min by default, so rekeying should happen 2 min before that, but phase 1 should not go down.

Can you please let me know how you are verifiying that phase1 is actually went down?

Also as my colleague requested please share ike debug, it will help us to find more information.

Christian_89Author

Contributor III

Hello

Yes the phase 1 also falls away but comes right back up.

Christian_89Author

Contributor III

I think I have fixed the problem.

I have set the keylifetime down to 30min. Since I did this the tunnel no longer went down

Christian_89AuthorAnswer

Contributor III

Was a problem on the part of Vmware Edge

New Member

I would recommend to check logs VPN logs and check ike debug traces on FortiGate side once the issue is triggered.