Why is the IPSec tunnel going up like that?

A

Al Tinho2018-09-12 13:33:59

linux

Al Tinho, 2018-09-12 13:33:59

Good afternoon! There are several IPSec tunnels from the data center to different subnets, so the tunnel rises to 1 subnet only after a ping from the data center to the subnet gateway, (PS other tunnels are raised automatically), tell me how can this be?

Reply

Answer the question

In order to leave comments, you need to log in

2 answer(s)

M

MrPurrPurr, 2018-09-12
@MrPurrPurr

IPSec tunnels can be configured to "up" immediately after configuration or when there is traffic entering this tunnel. For example, on the juniper SRX, the "establish-tunnels (immediately | on-traffic);" parameter is responsible for this. Perhaps you have something similar.

C

CityCat4, 2018-09-12
@CityCat4

I encountered this on racoon on FreeBSD - the first phase passes, but the second horseradish will pass if no traffic is allowed through the tunnel - and if it is not there for some time, it just falls off. You need to look at the software settings.