IPSec VPN Success Build Up but Tunnel not stable

|
  • 35
  • 0

Issue Description

NGAF build IPsec VPN with third party device. IPSec VPN tunnel success build up but the tunnel not stable.

Error/Warning Information

1. When check the VPN status found out the Time Connected keep changing.
   
2. Check System Log the NGAF keep nego with third party device to build IPSec VPN tunnel.

Handling Process

1. Check system log foud out the DPD timeout cause the tunnel being deleted.
2. Check both side DPD setting not consistent.   
    NGAF check DPD setting path: Network > IPSecVPN > IPSecVPN > Phase 1.
   
3. Change the DPD settting to be consistent. Tunnel become stable.

Root Cause

DPD setting in both side not consistent.

Solution

Change either side DPD setting.

Suggestions

If one side had enable the DPD, another side also need to enable the DPD.

I want to write a case
Doc ID: 2730
Author: Newbie1212
Updated: 2024-11-12 16:41
Version: