Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Troubleshooter
New Contributor

Monitoring Traffic during IPSec VPN

Hi Guys, I`ve set up a VPN Solution with one 111C in the Head-Quarter and 12 30B in Branch Offices. In the last week i got sometimes broken tunnels and if I bring up the tunnels manually it works fine again. Thats not a real problem, but it will be fine if I can monitor the traffic (by ping at the easiest way) during the Tunnel and if the Ping fails I will set up a script or something that will reconnect the tunnel automatic. Is there anyone who understand me? I will run a script directly at the Branch Office FGT to bring up the tunnel if the 3rd or 4th ping to a special system at the headquarter fails. Thanks for your answers!
1 REPLY 1
ede_pfau
Esteemed Contributor III

Hi, and welcome to the forums. What you are looking for is already implemented in the FortiOS. You can set a parameter in phase 2 to have the FGT automatically reestablish the tunnel should it go down:
 config vpn ipsec phase2
    edit <phase2_name>
    set auto-negotiate enable
 end
Also, you should enable ' Dead Peer Detection' in phase 1, and ' Autokey Keep Alive' in phase 2, as usual. I wonder how you would script the FGT - you' d be the first to do so.

Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Labels
Top Kudoed Authors