[SOLVED] losing connection in ipsec phase 2



  • Hi all,

    we are currently having big problems losing phase 2 connections on some of our ipsec tunnels.

    Our systems: pfsense 2.2.6 on SG-2240, SG-4680 1U, C2758 1U

    Several times a day the tunnels are going down, phase 1 is still connected, phase 2 is disconnected. It can be restartet manually or after some it restarts automatically.
    In the web configuration (Status -> IPSec) the tunnel is connected, but there are no child SA entries anymore.

    Configuration on both ends is exactly the same (lifetime, protocols…).

    Does anyone having the same problems can give a hint solving this?

    Regards!



  • I have similar problem. We have two phase 2 connections defined. Sometimes one of the two (randomly) is lost and not established again.
    Restart the VPN tunnel and all is ok.

    Also we have V 2.2.6 running.



  • our config:

    IKEv1

    phase 1:
    PSK
    main
    AES 256
    SHA256
    DH group 5
    Lifetime 7800
    NAT-T Auto
    Enable DPD (10/5)

    phase 2:
    ESP
    AES 256
    SHA256
    Dh group 5
    Lifetime 3600
    Ping host



  • On friday we switched on IKEv2 - no problems since then



  • @kopie0123:

    On friday we switched on IKEv2 - no problems since then

    Hi,

    i have the same issue, but how you can change from IKEv1 to IKEv2?
    Is that option show at the Phase 1 entry or the Phase 2 entry?



  • You can change this on the Phase 1 page.