[Swan] Tunnel gets established, but machines can reach each other only for less than a minute

[Paul Wouters]

On Mon, 30 Jan 2023, ud at blueaquan.com wrote:

> I changed the HO's statement to auto=add while keeping auto=start at the Site Office. Also removed encapsulation statement at both
> ends, However there is no change in status, both machines are unable to reach each other. The tunnel is getting established as
> always, attaching the logs from both sides FYI.

Once the tunnel is not working, can you run on both ends:

ipsec whack --showstates

Let's see if both ends are still thinking the tunnel is up or not.

Paul