IPSEC Tunnel connected twice

Hi,

Disconnect the IPSec VPN and Change timmer as Phase Timer must be higher than Phase 2.  I noticed the same issue with Palo Alto devices and found the timmer issue. 

Hi,

this is my config, which option i have to edit ??

 Hi,

As Phase 1 Key life is 86400 and Phase 2 is also 86400 but re-key margin timmer is making a difference. Please make Phase 2 key life (at both end devices) 54000. This issue will resolve. 

 Hi,

As Phase 1 Key life is 86400 and Phase 2 is also 86400 but re-key margin timmer is making a difference. Please make Phase 2 key life (at both end devices) 54000. This issue will resolve. 

I made the change, i will back to confirm the solution.

thanks a lot.

Hi,

Sure. Will waiting for good news.

Hi,

the problem still existe.

i moved to SSL VPN, it's nice and stable.

also i will back to SFOS 17.0.6 MR-6, the ipsec is stable on this version.

thanks for ur help :D