Could you kindly confirm if the encryption settings match across all IPsec tunnel instances? It might also help to restart the IPsec service on the server side, particularly on the device with the public IP address.
Additionally, could you provide a screenshot of the configuration for the tunnel that isn’t working correctly, along with relevant logs? Please ensure any private or sensitive information, such as public IPs or credentials, is hidden before sharing.
Furthermore, I recommend checking out our comprehensive IPsec configuration example available on wiki page: IPsec RUTOS Configuration Example. It might provide helpful guidance.
Could you kindly clarify your configuration further? From your description, I understand you have 3 IPsec tunnel endpoints, and the issue arises when you delete or reconfigure one or more IPsec instances, as the connection fails to establish.
I haven’t encountered a similar issue when reconfiguring IPsec tunnels on hosts. However, here are a few suggestions to help address the problem:
Have you tried restarting the tunnel through the WebUI?
Alternatively, you can restart the IPsec service via the CLI using the following command:
/etc/init.d/swanctl restart
Could you provide logs from the side where the connection fails to establish?
Indeed, the RUT is configured with 3 IPsec instances.
But, before the firmware update “RUT9_R_00.07.07.2” → “RUT9M_R_00.07.11.3”, all 3 instances were working correctly.
After the update only 2 instances work correctly regardless of the VPN tunnel.
Currently, we have 38 RUT devices for our client, we must have reliability and stability of the connections.
Was this problem ever solved? We are now having the same isues with RUT951, with firmware RUT9M_R_00.07.06.5 And Modem Firmware EC25ECGAR06A14M1G_20.200.20.200.
There were multiple major IPsec fixes included in the latest RUTOS firmware release (7.12). Could you kindly upgrade your RUT951 to the latest RUT9M_R_00.07.12 version and check if the issue persists?
If it still won’t be solved after firmware upgrade, then feel free to create a separate forum thread with a detailed description of the issue so we can investigate it further.