Description

This article describes about the ike-idle-timeout which tears down the VPN tunnel even though there is active traffic through the tunnel.

Symptoms

Ike-idle-timeout is configured to tear down the SA if there is no active traffic via the tunnel, however it shouldn't tear down the tunnel if there is active traffic.


Command to configure ike-idle -timeout: 
#set security ipsec vpn <VPN-TUNNEL-NAME> ike idle-time <0-999999s>
This command will essentially tear down the tunnel after a number of seconds configured via the command above.

Solution



This issue is tracked in the PR1802145 and below are the fixed versions.

junos:23.4R2 junos:24.2R1 junos:24.3R1

Modification History

29-08-2024 Kb created