IPSec not matching Phase 2?
-
Hello,
I have an IPSec tunnel with multiple Phase 2s. I have set multiple IPSec tunnels and they all worked flawlessly. I've set another one today and here's where it gets weird. I can only see one P2 coming up.
All my Phase 2s are using a local subnet (10.41.199.0/24) and I've got multiple remote subnets (10.41.3.0/24, 10.41.12.0/24, 10.41.62.0/24, etc). Only the FIRST defined and enabled Phase 2 ever gets online.
For example, I'm pinging from 10.41.199.65 to 10.41.3.2. I can only see the 10.41.14.0/24 SA as established, and I can't find anything in the logs about 10.41.3.0/24 remote. It looks like it's not even trying to get the P2 up. Why is that?P.S. the other end is a Fortigate device. If I manuall raise all tunnels from the fortigate, everything works as expected....
Thank you!