topic Re: Site to site vpn drops on policy install in General Topics

Site to site vpn drops on policy install

iancollins — Mon, 05 Oct 2020 00:02:03 GMT

I have about 8 site to site vpn connections to customers on our R80.30 firewall.

When I install policy changes, some of these connections drop out. Using vpn tu option 7 fixes it.
I've seen various discussions about this - but am unsure what to try.

We currently have "rematch connections" in the connections persistence settings. Is this the best setting - or are there any recommendations for "keep data connections" or "keep all connections"?

How about overriding the default settings in the services in the ipsec service group - and setting "Keep connections open after the policy has been installed"?

Thanks, Ian

Re: Site to site vpn drops on policy install

Timothy_Hall — Mon, 05 Oct 2020 13:54:42 GMT

Try setting the keep_IKE_SAs checkbox as described here:

sk142355: VPN tunnel goes down after policy push, must be reset to bring it up

Re: Site to site vpn drops on policy install

Dreyfuss — Fri, 29 Aug 2025 13:27:51 GMT

Thanks for the info, but unfortunately it didn't work for me. Any other suggestions? 81.10 OS Gaia 3.10 take 174

Re: Site to site vpn drops on policy install

CaseyB — Fri, 29 Aug 2025 14:05:50 GMT

I would recommend making your own thread with pertinent details as this one is nearly 5 years old.

I did see this new SK today: sk183778 - Site-to-Site VPN tunnel between a Centrally Managed Quantum Spark Gateway and a VPN peer with a Dynamic IP Address goes down after policy installation