Hi All.
I am new to vyos and am currently using VyOS 1.3.0-rc6 and have a stable site to site Ipsec VPN using IKE2 which looks like this;
Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal
peer-xxx.xxx.x.x-tunnel-0 up 1h57m8s 14M/768K 35K/19K xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128/MODP_2048
If the peer becomes unreachable vyos tries to recreate the tunnel BUT I end up seeing anywhere from 3 to 5 tunnels as below.
Connection State Uptime Bytes In/Out Packets In/Out Remote address Remote ID Proposal
peer-xxx.xxx.x.x-tunnel-0 up 41s 0B/0B 0/0 xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128
peer-xxx.xxx.x.x-tunnel-0 up 41s 0B/0B 0/0 xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128/MODP_2048
peer-xxx.xxx.x.x-tunnel-0 up 41s 0B/0B 0/0 xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128/MODP_2048
peer-xxx.xxx.x.x-tunnel-0 up 41s 0B/0B 0/0 xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128/MODP_2048
peer-xxx.xxx.x.x-tunnel-0 up 41s 0B/0B 0/0 xxx.xxx.x.x N/A AES_CBC_256/HMAC_SHA2_256_128/MODP_2048
when the peer becomes reachable again data flows between the 2 peers even though it shows 5 tunnels.
The only way to solve this is to issue the command;
reset vpn ipsec-peer xxx.xxx.x.x
This only works while the peer is reachable.
After this is done it will again show 1 tunnel as in the top example.
Is there a setting I need to change to correct this or is it a bug in the current release?