Differences Between IPSEC and LSVPN Tunnel Monitoring

Differences Between IPSEC and LSVPN Tunnel Monitoring

Created On 09/27/18 11:00 AM - Last Modified 06/01/23 08:21 AM



This document explains the differences between the normal IPSEC tunnel monitoring and LSVPN tunnel monitoring.



IPSEC Tunnel Monitoring:

The tunnel monitors for the specific IP address mentioned in the 'destination field' as below, there are ICMP echo requests that are sent at specific intervals to check if the destination specified is alive. In case there is no response for the specified number of requests, the destination is considered not reachable and fail over occurs:

User-added image


LSVPN Tunnel Monitoring:

In contrast to IPSEC tunnel monitoring, the IP address given in the destination field is monitored by the satellite devices. If no IP is configured, the satellites will monitor the gateway's tunnel interface address:

User-added image


The setting needs to be configured only on the gateways. This will automatically be pushed to the satellites. Once the primary gateway fails, traffic from the satellites would be diverted to secondary gateway.


owner: rrajendran

  • Print
  • Copy Link


Choose Language