IPSEC Tunnels using VTI disconnect and dont reconnect

[tkroeger]

I've set up a few site-to-site VPNs now using VTI and I love the ability/flexibility they bring to the platform. Super excited with the possibilities. In fact, I've set up a few different variations:

• 3 site pfsense only VPN with OSPF and fail over tunnels between all
• 2 site between ASA / pfsense with fail over tunnels and BGP
• 2 site between pfsense and AWS with fail over tunnels and BGP

In all three situations, I routinely have to reconnect tunnels manually. Failover works in all of the above situations, but for some reason both tunnels will disconnect and I'll have to manually restart them.

Any thoughts on why this is happening?

Thanks!

[jimp]

https://redmine.pfsense.org/issues/9767#note-1