topic Re: Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE in Spark Firewall (SMB)

Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE

khineminn — Sun, 28 Jul 2024 11:34:01 GMT

I am facing an issue with redundant IPsec tunnels using dual ISPs.

WAN link failover is working correctly, and the tunnel shifts to the other ISP as expected. However, the session still retains with the existing Tunnel Creation Time although WAN IP is changed.

The tunnel should automatically reset when switching to a different ISP, but it doesn't do so on its own.

The tunnel works again after manually resetting it by clicking Delete All SAs for the Selected Peer.

I hope you understand my query. Please provide any suggestions on how to reset the tunnel automatically or if there are any special configurations required.

I have also attached the error screenshots.

Re: Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE

PhoneBoy — Mon, 29 Jul 2024 12:06:30 GMT

What hardware and firmware version?
What are your settings in VPN > Site to Site > Advanced?

Re: Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE

khineminn — Tue, 30 Jul 2024 07:50:46 GMT

Quantum SPARK 1800

R81.10.10 (996002945)

After changing to DPD from CP Proprietary in Advanced, this issue has been resolved and dual IPsec tunnels work fine.

@PhoneBoy Thank you very much.

Re: Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE

skandshus — Tue, 30 Jul 2024 13:12:57 GMT

Are you able to elaborate what you did because i have the same issue 🙂

Re: Quantum Spark Redundant IPsec tunnels Using Dual ISPs ISSUE

PhoneBoy — Tue, 30 Jul 2024 14:09:01 GMT

This screenshot should help.