VPN Tunnel after upgrade to MR5 is continiously establishing new VPN tunnels

Hi Niko,

I think you are affected from the issue here. Please contact support to append a fix. The global fix will be release in v17 MR6.

Thanks

Niko, 

What are your DPD settings on each side of the tunnel?

DPD is not in use, because I had problems 1 year ago with that settings.

Hi sachingurung ,

as I read that bug, the conditions do not met in our environment. 

We have only one subnet and the other side is Strongswan (Sophos XG 17.MR5)

cheers

Niko

Yes DPD can be quite the pain. But if configured correctly I will work and I suspect it may resolve this issue, unless as previously mentioned the issue is in StrongSwan. 

The correct settings for DPD and the rest of the tunnel can be found here. Basically, you should have one side of the tunnel's DPD set to disconnect and the other can be set to connect. The fixed many problems for me. It is because the tunnels would try and re-initiate without actually tearing the first ones down. Created huge resource issues and unstable tunnels. 

Thx IPInfoSec, I`ll give that settings a try this evening :).

cheers

Niko

Hi Niko,

The GUI might be freezing a the CSC might be stuck. I will request you to update us after upgrading to MR6 if you still face this issue. 

Thanks