Reboot required when IPSEC drops

Stewart · Sep 20, 2014, 4:16 AM

I'm running the nanoBSD 2.1.4 image between 2 APU1C setups and am having issues with IPSEC. If the link ever goes down the boxes need to be rebooted for it to come back up. I've tried restarting the racoon service but it doesn't help. I won't be back at the equipment until Monday but the logs keep showing entries like```
ERROR: phase1 negotiation failed due to send error.

jimp · Sep 23, 2014, 5:20 PM

Check/reset the states table, probably a stale state.

l123456 · Oct 31, 2014, 2:14 AM

How to reset ?

cmb · Oct 31, 2014, 2:57 AM

You running PPTP on there? That's the log you end up with in the misconfiguration described here.
https://redmine.pfsense.org/issues/1421

Jim's suggestion is the other likely possibility. When it's happening, check Diag>States, filter for ESP, :500 and :4500. What do those look like?