<![CDATA[SG-5100 21.02 IPsec tunnels duplicate/incorrect status]]>SG-5100 upgrade to 21.02. I have about 25 IPsec tunnels. I only have maybe 5-10 up at anytime as I use these to connect/support remote networks and do not normally keep all up.
After upgrade I notice IPsec status is slow to refresh so I start disabling tunnels until it is fast again. I notice that after enabling one by one that some tunnels in Status, IPsec show green disconnected button at bottom but are actually connected and have another IPsec ID. These tunnels seem to cause the slowness of the UI status. If I disconnect one of those IDs and then reconnect at bottom it connects again but still shows this other ID instead. Some tunnels are OK and do not exhibit this behaviour. I have tried deleting these problem tunnels and recreating the IPsec on each end and still same issue. Any ideas why? I am thinking maybe something got corrupt and a backup/restore may work but I have to wait until weekend to do.

]]>https://forum.netgate.com/topic/161291/sg-5100-21-02-ipsec-tunnels-duplicate-incorrect-statusRSS for NodeSat, 16 May 2026 22:55:36 GMTTue, 23 Feb 2021 04:40:27 GMT60<![CDATA[Reply to SG-5100 21.02 IPsec tunnels duplicate/incorrect status on Sun, 07 Mar 2021 23:14:18 GMT]]>@jimp Hi there, I updated to 2.5 and found that my site-to-site IPSEC VPN connections were broken. I found this thread and installed the aforementioned patches which fixed the VPN (including the Status->ipsec page) but the ipsec status widget still seems to be broken, i.e., they show connected on the Status->ipsec page but show as down on the Widget->Tunnels tab.

Thanks

]]>https://forum.netgate.com/post/970988https://forum.netgate.com/post/970988Sun, 07 Mar 2021 23:14:18 GMT<![CDATA[Reply to SG-5100 21.02 IPsec tunnels duplicate/incorrect status on Tue, 23 Feb 2021 23:23:50 GMT]]>@jimp Thanks I applied all six patches and didn't even have to reboot - issue resolved instantly.

]]>https://forum.netgate.com/post/967370https://forum.netgate.com/post/967370Tue, 23 Feb 2021 23:23:50 GMT<![CDATA[Reply to SG-5100 21.02 IPsec tunnels duplicate/incorrect status on Tue, 23 Feb 2021 22:45:40 GMT]]>That code should be the same for both

]]>https://forum.netgate.com/post/967355https://forum.netgate.com/post/967355Tue, 23 Feb 2021 22:45:40 GMT<![CDATA[Reply to SG-5100 21.02 IPsec tunnels duplicate/incorrect status on Tue, 23 Feb 2021 20:18:54 GMT]]>@jimp Thanks, the target version is 2.5 can I use these for 21.02 or are there ones specific to the pfsense+ ?

]]>https://forum.netgate.com/post/967312https://forum.netgate.com/post/967312Tue, 23 Feb 2021 20:18:54 GMT<![CDATA[Reply to SG-5100 21.02 IPsec tunnels duplicate/incorrect status on Tue, 23 Feb 2021 16:48:51 GMT]]>To ensure you have all of the current known and fixed IPsec issues corrected, You can install the System Patches package and then create entries for the following commit IDs to apply the fixes:

  • ead6515637a34ce6e170e2d2b0802e4fa1e63a00 #11435
  • 57beb9ad8ca11703778fc483c7cba0f6770657ac #11435
  • 10eb04259fd139c62e08df8de877b71fdd0eedc8 #11442
  • ded7970ba57a99767e08243103e55d8a58edfc35 #11486
  • afffe759c4fd19fe6b8311196f4b6d5e288ea4fb #11487
  • 2fe5cc52bd881ed26723a81e0eed848fd505fba6 #11488
]]>https://forum.netgate.com/post/967194https://forum.netgate.com/post/967194Tue, 23 Feb 2021 16:48:51 GMT