IPSec VPN is going down

[#1]

hi! Some time after bringing up an IPSec VPN, it comes down and I it gets up only when I send data from one side. Is there any way to keep it up permanently? thanks

[rwpatterson]

In your phase 1 definition, the advanced section near the bottom is an option " Keep Alive Interval" . Check this. Usually this will keep a tunnel up. I have seen tunnels drop with this on, but it' s better than nothing. Also in phase 2, there is again in the advanced section an " Auto Key Keep Alive" . Check this box as well. In the policy that allows tunnel traffic, the " Allow Inbound" and " Allow Outbound" determine which sides of the tunnel are allowed to begin negotiation to open it. I usually check both, because it' s secure, either side should be able to bring it up. Good luck

[romanr]

ORIGINAL: Raquel hi! Some time after bringing up an IPSec VPN, it comes down and I it gets up only when I send data from one side. Is there any way to keep it up permanently? thanks

Have a look into your logs! some configuration erros might lead to the fact, that only one of the Boxes is able to establish the IPSec-tunnel.

[#4]

Configuration was ok and I didnt see anything wrong in logs (still looking). Thanks for your quick replies If you have any other idea, I will be pleased to hear them

[abelio]

Raquel, if you want keep up the vpn even when there' s no traffic originated from hosts behind peers, you need put additional CLI commands as rwpatterson suggested above. We don' t know which FortiOS you' re running, and which vpn type you' ve configured. So, let assume fortios 3.0 and VPN policy or tunnel mode: in that case,

 config vpn ipsec phase2
   edit <name_of_your VPN_phase2>
   set auto-negotiate enable
 end
 

If you' re under different fortios/vpn, update that info in the forum, so we can see it hope it helps,