I have situation where there is VPN connection between Vyos and ISP’s router.
At first the VPN is up, can ping remote prefix (remote prefix is in kernel route) and traffic can go through.
However after few hours (in my current situation 9 to 10hours) the prefix route in kernel is missing. Unable to ping remote prefixes and no traffic going through. The VPN is up with traffic Bytes In/Out shows N/A :
vyos@vyos:~$ sh vpn ipsec sa | strip-private
Connection State Up Bytes In/Out Remote address Remote ID Proposal
peer-xxx.xxx.251.6-tunnel-1 up 44 minutes N/A xxx.xxx.251.6 N/A AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
I have to restart VPN everytime this issue happen. It start to happen after I upgrade vyos 1.1.8 to 1.2.
Any idea why this is happen?