I've setup a LAN to LAN IPSEC tunnel to a Draytek Vigor 2860 router and PFSense (2.2.1) is firing up multiple Phase 2's… possibly when there's no traffic. Once it's in this state traffic doesn't flow.

If I disconnect/reconnect and leave a ping running then it seems stable. If I stop the ping then shortly thereafter PFSense starts another Phase 2 and this appears on the Draytek's VPN Connection screen.

I've specified a 'Automatically Ping Host' for the remote (Draytek) LAN in the Phase 2 settings and played with the 'Unique IDs' setting in the Phase 2 Advanced tab.... but changing this doesn't seem make much difference and the setting doesn't stick (set it to 'No' or 'Never' and when I go back in it's reset itself to 'Yes').

Attached is a screen scrape of the PFsense IPSEC status tab.

Thanks in advance for any help.