Hi, I recently was troubleshooting some tunnel issues between Palo Alto firewalls and noticed in debug messages that there were soft lifetime and hard lifetime exchanged in negotiations. Apparently hard lifetime is when the sa expires but soft is bef...

Hi, can someone please explain in case of having encryption domains rather than having a route- based IPsec, do the encryption domains have to match at both sides? For instance if I have local:10.20.1.0/24 and 10.40.0.0/24 and remote: 192.168.72.0/24...

Hi,can someone please advise how much bandwidth will be utilized during the key negotiation and rekeying? just an estimation.I have some issues with a tunnel that have lots of encryption domains (50+) and the lifetime is set to 10 minutes currently f...

Hi,I have a simple hub and 2 spokes topology, with ospf routing. after configuring dmvpn, my tunnels come up and  spokes can ping each other and learn each others routes.However after adding ipsec, although spokes still learn the routes via ospf, Im ...