IPsec site to site

[nwd]

IPsec site to site phase 1 & 2 up but daily no traffic passing until disable and enable the tunnel

[nwd]

you mean link monitor of the IPsec tunnel?

config system link-monitor
    edit "link-test"
        set srcintf "tunnel name"
        set server "remote tunnel ip"
        set gateway-ip <local tunnel ip>
        set route "second tunnel ip"  <----- Route affected when link monitor fails.
    next
end

is this correct?

[srajeswaran]

Below given is the config for HQ:

config system link-monitor
edit "link-test"
set srcintf "TO-103D-SKY"
set server "any /32 ip" from 192.168.103.0/24
set gateway-ip 10.10.20.2
set route "192.168.103.0/24" <----- Route affected when link monitor fails.
next
end
config system link-monitor
edit "link-test1"
set srcintf "R-HQ-R"
set server "any /32 ip" from 192.168.103.0/24
set gateway-ip 10.10.10.2
set route "192.168.103.0/24" <----- Route affected when link monitor fails.
next
end

[nwd]

Hi srajeswaran,

sorry for the late reply,

but I can't find command "set route "192.168.103.0/24" <----- Route affected when link monitor fails."

version 6.4.12

[yorge]

diagnose snifer packet base on interface, local host and remote

[tthrilok]

Hi nwd,

Could you please confirm if the npu-offload is enabled or disabled in the VPN.

You may check using the below command:

show full vpn ipsec phase1-interface <NAME>

If the npu-offload is enabled, could you try by disabling it and test.

[nwd]

was enabled

now waiting

[tthrilok]

ok, could you confirm when was the npu-offload disabled?

After disabling you are still seeing the issue?