Skip to main content
lostboy10
Explorer II
February 5, 2024
Question

Zscaler GRE tunnel goes down after sometime

  • February 5, 2024
  • 4 replies
  • 3887 views

I have configured GRE tunnels with my fortinet cluster which is hosted on aws...the tunnel comes up and works fine for sometime but then goes down randomly...when I failover to the other member it again comes up for a while but then goes down again..

 

Any help is appreciated 

4 replies

AEK
SuperUser
SuperUser
February 6, 2024

I didn't use much GRE but the few times I used it I noticed connectivity issue. I recommend to use IPsec tunnel instead.

AEK
smaruvala
Staff
Staff
February 7, 2024

Hi,

 

Have you checked system event logs? If you have a GRE keepalives/monitor and if it is failing intermittently then it can cause issues with the GRE tunnel. Usually system log will be something which you can look at first.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-GRE-Tunnel-monitoring/ta-p/197720

 

Regards,

Shiva

syordanov
Staff
Staff
February 7, 2024

Hello,

First step which you can do is to do a 'diagnose sniffer packet ' for the remote IP address of the GRE tunnel  when does not work to see if your device sends and receives packets from remote GRE tunnel.
Second is to check the link-monitor status if it's configured. If you have link-monitor and your FG does an icmp requests , check for DDoS protection on remote end .

 

Best regards,

Fortinet

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!