IP tunnel goes down, despite of the attempts to restart the IPsec tunnel, it fails to recover.

The reboot of the node also did not help resolving the problem.

IPsec pluto logs in journalctl confirms auth was sent by SSR for which no response was received. This keeps repeating.

"ipsec-client-tunnel-pa-cipher2-pa-2" #2: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_CBC_128 integ=HMAC_SHA1_96 prf=HMAC_SHA1 group=MODP1024}

"ipsec-client-tunnel-pa-cipher2-pa-2" #2: STATE_PARENT_I2: retransmission; will wait 0.5 seconds for response

"ipsec-client-tunnel-pa-cipher2-pa-2" #1: STATE_PARENT_I1: retransmission; will wait 1 seconds for response

Check if the file /var/lib/128technology/plugins/ipsec/ipsec-event-state.json is empty.

In such case below workaround can be applied to recover the problem.

1. Go to the directory /var/lib/128technology/plugins/ipsec/

# cd /var/lib/128technology/plugins/ipsec/

2. Check if the file below file is empty or not. If its empty delete or move the file ipsec-event-state.json

3. Overwrite the content of the file /var/lib/128technology/plugins/ipsec/ipsec-active-status with "active"

# echo -n "active" > /var/lib/128technology/plugins/ipsec/ipsec-active-status

4. restart 128t-ipsec service

# systemctl restart [email protected]

5. Check the status of 128t-ipsec

# systemctl status [email protected]