Description

IPSec SA and IKE SA keep on flapping with the error "Gateway configuration deletion triggered clearing of IPSec SA".

The st interface does not come UP.

Symptoms

Logs and IPSec tunnel down reason reported  "Gateway configuration deletion triggered clearing of IPSec SA".

Solution

This was due to a duplicate IKE gateway configuration.

There were two IKE Gateways configured with the same public IP address. The IKE and IPSec tunnel reported as UP.


However, the tunnel interface bound never came up due to duplicate entries.

Once the duplicate gateway was removed, the issue was resolved.

Modification History

2025-02-28 : Article Created