https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224168#M43027 <P>Unless you have some sort of DPD or tunnel monitoring traffic in place, an IPsec tunnel is only going to establish when traffic is going across it.</P> <P>You can specifically clear the Phase 2 IKE SA's from the CLI, but that is not a rekey, rekeys happen at defined intervals, so you would need to generate some Phase 2 traffic after clearing them. If you need to reset a tunnel, that is done for both Phase 1 &amp; 2.</P> Wed, 21 Aug 2024 12:55:00 GMT CaseyB 2024-08-21T12:55:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224116#M43026 <P>I have a successful VPN Tunnel to Azure VPN Gateway. Everything is good, but after a recent internet outage I observed that the tunnel took some time to come up again. It seems that the tunnel came up when Phase2 rekeyed. Is there a manual way to trigger Phase2 rekey? (It may have been triggered by passing traffic, so if you can confirm this solution it would also be helpful.)</P> Tue, 20 Aug 2024 21:46:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224116#M43026 bcrazy 2024-08-20T21:46:38Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224168#M43027 <P>Unless you have some sort of DPD or tunnel monitoring traffic in place, an IPsec tunnel is only going to establish when traffic is going across it.</P> <P>You can specifically clear the Phase 2 IKE SA's from the CLI, but that is not a rekey, rekeys happen at defined intervals, so you would need to generate some Phase 2 traffic after clearing them. If you need to reset a tunnel, that is done for both Phase 1 &amp; 2.</P> Wed, 21 Aug 2024 12:55:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224168#M43027 CaseyB 2024-08-21T12:55:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224177#M43028 <P>Maybe try a policy push not 100% sure.</P> Wed, 21 Aug 2024 13:32:25 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224177#M43028 Lesley 2024-08-21T13:32:25Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224204#M43031 <P>Thank you, I did need to delete all ike and ipsec associations then pass traffic. The command I was looking for was <STRONG>vpn tu</STRONG></P> Wed, 21 Aug 2024 22:43:56 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/ipSec-VPN-Tunnel-to-Azure-manually-trigger-Phase2-rekey/m-p/224204#M43031 bcrazy 2024-08-21T22:43:56Z