Log in

Sangfor Support Center

Table of Contents
< All Topics
Print

【NGAF】IPSec VPN Success Build Up but Tunnel not stable

Posted
Updated
Bykongyeow@sangfor.com
Views22

Issue Description

NGAF build IPsec VPN with third party device. IPSec VPN tunnel success build up but the tunnel not stable.

Error/Warning Information

  1. When check the VPN status found out the Time Connected keep changing.
    file
  2. Check System Log the NGAF keep nego with third party device to build IPSec VPN tunnel.

Handling Process

  1. Check system log foud out the DPD timeout cause the tunnel being deleted.
  2. Check both side DPD setting not consistent.
    NGAF check DPD setting path: Network > IPSecVPN > IPSecVPN > Phase 1.
    file
  3. Change the DPD settting to be consistent. Tunnel become stable.

Root Cause

The DPD setting in both side not consistent.

Solution

Change DPD setting on either side device to make sure the DPD configuration are consistent.

Suggestions

If either side had enable the DPD, another side also need to enable the DPD.