Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Site - Site IpSec http and UDP traffic dies

    Scheduled Pinned Locked Moved IPsec
    1 Posts 1 Posters 465 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mstopkey
      last edited by

      Hello all.

      We have site to site IpSec, both PfSense end points. Several times per day, http and UDP traffic gets delayed (Best determination). VPN is still up, can ping inside both ways with good results, ssh etc. VOIP UDP is delayed to the point where Asterisk times it out and Http traffic is heavily delayed. Negotiation mode is Main, Prefer Older IpSec SA's is off (tried on). Have looked over forums and don't see a solution. I see this on https://doc.pfsense.org/index.php/IPsec_Troubleshooting:
      (pfkey Delete ERROR: pfkey DELETE received
      You might see this message repeatedly as Phase 2 is renegotiated between two endpoints (for multiple subnets). The tunnels still work, but traffic may be delayed while the tunnel is switched/reestablished. (more research needed for possible solutions)
      Exactly our scenario and seeing this message in the logs when this happens.
      Remote end has super net of 192.168.32.X/22

      Any clue?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.