IPsec logs: traffic selectors unacceptable
sometimes some IPsec Phases 2 go down and in the IPsec logs I see the following errors:
10[IKE] <con2000|8> traffic selectors 192.168.123.100/32|/0 192.168.123.0/24|/0 === 192.168.174.238/32|/0 192.168.174.0/24|/0 unacceptable
Forcing reconnect on phases 2 do not solve the problem.
I have to stop the IPsec service and start it again to solve the problem.
The strange thing is that I have this very same problem on two different pfSense systems on different IPsec connections.
Could you help me to understand, please?
Thank you very much!
Any hints for this?
The problem persists and the VPN is blocking 2-3 times per week, it's very annoying.
And the same problem happen on two different pfSense installations, so I'm thinking about a miss-configuration or bug.