ipsec VPN two tunnels


#1

Hi everyone,

first of all, i wish everyone a happy new Year!

i just wanted to make sure if this behavior from vyos is right.

I have one ipsec-peer with two tunnels.
first tunnel is for the foreign subnet 10.10.10.0/24
second tunnel is for the foreign subnet 192.168.10.0/24

The tunnel is established very well. But if i do

show vpn ike sa

[attachment=100]
[attachment=101]

then i see sometimes two ike session and sometimes only one ike session.
In both cases both tunnel are established.

by doing
show vpn ipsec sa

it always shows me the both tunnel up, which is ok.

the only thing is disturbing me, that sometimes i can see two ike session and sometimes only one when i do
show vp ike sa

what do you guys think.

best regards
Jean

Version:
vyos@srv-ngrouter:~$ show version
Version: VyOS 1.1.6
Description: VyOS 1.1.6 (helium)
Copyright: 2015 VyOS maintainers and contributors
Built by: maintainers@vyos.net
Built on: Mon Aug 17 03:58:33 UTC 2015
Build ID: 1508170358-a3033d5
System type: x86 64-bit