IPSEC Tunnel connected twice

Question

Hi, 
 IPSEC VPN show twice in IPSec connexions, sometimes it block traffic & i must disconnect tunnel manually to fix it.

MMASLOUH · Accepted Answer

Hi, 
 the problem still existe. 
 i moved to SSL VPN, it's nice and stable. 
 also i will back to SFOS 17.0.6 MR-6, the ipsec is stable on this version. 
 thanks for ur help :D

Deepak Verma · Answer

Hi, 
 Disconnect the IPSec VPN and Change timmer as Phase Timer must be higher than Phase 2. I noticed the same issue with Palo Alto devices and found the timmer issue.

Deepak Verma · Answer

Hi, 
 As Phase 1 Key life is 86400 and Phase 2 is also 86400 but re-key margin timmer is making a difference. Please make Phase 2 key life (at both end devices) 54000. This issue will resolve.