Multiple child SA entries (same tunnel)
-
Hello experts, can someone help me please. I'm experimenting some weird issues with an ipsec site to site tunnel, the most time works fine, but for some reason after a while it begins to duplicate the phase 2 entries, i mean the same local network, same remote network, different spi. When the number of entries are many, i dont know exactly the exact number but lets say, more than 15, the tunnel stops to work and i have to disconnect it and reconnect it manually.
Thanks in advanced for your help
-
What settings do you have on the Phase 1 entry for this tunnel and on the Advanced tab in IPsec?
-
-
Hi,
Did you managed to solve your problem ? I have exactly the same strange thing : duplication of phase 2 which leads to freeze the VPN.
I had this issue for long (2.3.?) and even now with the 2.4.2-1 version.
Thanks,
Fred
-
Same issue here, 2.4.3-1
