ipSec VPN Tunnel to Azure, manually trigger Phase2 rekey?

[bcrazy]

I have a successful VPN Tunnel to Azure VPN Gateway. Everything is good, but after a recent internet outage I observed that the tunnel took some time to come up again. It seems that the tunnel came up when Phase2 rekeyed. Is there a manual way to trigger Phase2 rekey? (It may have been triggered by passing traffic, so if you can confirm this solution it would also be helpful.)

[CaseyB · Accepted solution]

Unless you have some sort of DPD or tunnel monitoring traffic in place, an IPsec tunnel is only going to establish when traffic is going across it.

You can specifically clear the Phase 2 IKE SA's from the CLI, but that is not a rekey, rekeys happen at defined intervals, so you would need to generate some Phase 2 traffic after clearing them. If you need to reset a tunnel, that is done for both Phase 1 & 2.

[bcrazy · Accepted solution]

Thank you, I did need to delete all ike and ipsec associations then pass traffic. The command I was looking for was vpn tu

[Lesley]

Maybe try a policy push not 100% sure.