IPSEC Online for 15-20 seconds then needs cycling.
Another frustrating IPSEC problem.
I have an IPSEC tunnel from my pfSense box at home to my Sonicwall Pro 3060 at the office. Everything has been working fine for 2-3 months. I haven't signed onto my pfSense box in over a month and I also adminster the SonicWALL at the other end. No changes have been made.
I notice today my tunnel is down, so I disable IPSEC and re-enable, the tunnel comes up fine and I can ping nodes on the other end for maybe 15 seconds. Then it goes down. Rinse and repeat and I can ping again, then it goes down. I've confirmed the settings at both ends (despite nothing being changed). I've re-created the profile on the pfSense box.
Any ideas why randomly the tunnel would keep going down but work for 15-20 seconds everytime IPSEC is cycled?
And yes both ends have been rebooted.
I should clarify. When the tunnel goes "down" pfSense still reports it up. I just can no longer ping anything at the other end.
Under System > Advanced, try to check the option to prefer old IPsec SAs.
I have to do that with some other devices such as Watchguard Fireboxes or Linksys routers or I see the same behavior.
Failing that, post the contents of your IPsec log from the initial working tunnel connection to the point where it is dead.
Enabling old IPSec SA did the trick.
Bit odd I hadn't enabled this for the past 3 months and no issues untill recently.