Only one P2 tunnel available at a time?

agrikk

I have a network setup lile the following:

alt text

I have two subnets behind a NSA4500 firewall and I'm connecting them to a pfsense device that sits in front of a third subnet.

I have set up an IPsec tunnel between pfSense and NSA4500 with two P2 Entries:
192.168.1.0/24 <--> 192.168.3.0/24
192.168.2.0/24 <--> 192.168.3.0/24

The problem I'm having is that, at any given moment, only one of the P2 connections is working and it flip-flops at random every couple of hours.

Both tunnels work independently, and they both work when I disconnect one or the other. It feels like some kind of renegotiation issue but I can't be sure.

agrikk

Here is the link configuration:

alt text

jimp

More than likely it's a problem with the other end, not pfSense, though not sure what it might be exactly.

Probably best to check the remote side status/logs to find out what it thinks is happening