Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: No VPN Traffic Flows for 3 Minutes after Phase 2 ReKey

$
0
0

Hi,

 

It's strange that "get event" doesn't give any information. From the SA output I see one device has the backup incoming SPI "life 86400 sec, 1141 remain," however another device doesn't have backup and matching outgoing spi.

 

1: What version both the device running ?

2; IS there any IKE life time related or commit bit set config etc:

   e.g : set ike soft-lifetime-buffer  or 
set ike initiator-set-commit
set ike responder-set-commit
  etc.

 

3: If no such config then can you take the "debug flow basic" of any failing traffic ?

 

Thanks,

Vikas

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>