Site-Site VPN issue

Forum|Forum|4 years ago
March 29, 2022
2 replies
3204 views

HI,
I have created a SS VPN with Cisco ASA.
Unless the remote site (ASA) initiates the ping, the VPN tunnel remains down. As soon as the ping is initiated from asa, everything works.
Can anyone help me with this?

FortiGate

akristof

Staff

Hello,

Thank you for your question. So if you manually bring phase2 up or traffic is initiated from client behind the FortiGate, tunnel is down? Can you verify if phase1 is up but phase2 not? Are you using address group in selectors in phase2? Can you share:

diag vpn ike gateway list name <tunnel_name>

diag vpn tunnel list name <tunnel_name>