IPSEC - Multiple Encryption domain

[bruchetthomas]

Hello

I've some problem with an IPSEC tunnel with PaloAlto on one side and PFSENSE on the other side and sometime the phase2 shutdown and we have to reboot the tunnel to negociate again the IPSEC.

On PaloAlto, I've 1 IPSEC linked to PFSENSE with 3 encryption domain inside.
I'dont have the information of the configuration on the PFSENSE but I can imagine admins have done the same things.
V.W.X.0/24 <-> a.b.c.d/32
V.W.Y.0/27 <-> a.b.c.d/32
V.W.Z.0/24 <-> e.f.g.h/32

My question is, Is PFSENSE able to manage mutiple Encryption Domains in a single tunnel or should we create 3 differents tunnel, one for each encryption domain