Skip to main content
Fullmoon
New Member
July 16, 2013
Question

vpn tunnel must always up

  • July 16, 2013
  • 3 replies
  • 10838 views
already established my ipsec vpn using dialup setup, my HQ was configured using public address and remotes sites using dynamic/public /private ip addresses. However the tunnel would only established if there was a traffic initiated from remote sites. What I want is the tunnel must be up all the time no matter no traffic coming from remotes sites HQ Phase1 Settings Keepalive frequency 10 (default) dead peer detection enabled Phase 2 Autokey Keep Alive enabled Remote Phase1 Settings Keepalive frequency 10 (default) dead peer detection enabled Phase 2 Autokey Keep Alive enabled Any inputs are highly appreciated :)

    3 replies

    ede_pfau
    SuperUser
    SuperUser
    July 16, 2013
    Set this option in the CLI on the remote side FGT:
     config vpn ipsec phase2-interface      edit " my_phase2"           set auto-negotiate enable      next  end  
    Carl_Wallmark
    New Member
    July 16, 2013
    As of 5.0.3, the auto-negotiate is in the GUI ;) (my request )
    ede_pfau
    SuperUser
    SuperUser
    July 16, 2013
    Cool! Please request 5.1 asap...
    Fullmoon
    FullmoonAuthor
    New Member
    July 16, 2013
    thanks for the info guys :)