topic ( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab407e3 in General Topics

( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab407e3

MP18 — Fri, 17 May 2019 21:56:26 GMT

What can be reason for this message

( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab407e332.' )

this causes Phas2 down then both Phase 1 and 2 down then Phase 1 comes back and phase 2 is still down?

Re: ( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab4

BPry — Sun, 19 May 2019 01:16:10 GMT

@MP18,

Is this by chance a microtik device that you are attempting to peer with?

As for the message, a common part of VPNs are determining if a Security Association (SA) has become stale, and removing those entries when they are. Stale entries are essentially an SA that has aged out or been deleted by the peer device, it essentially means that SA is no longer shared between peers.

Re: ( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab4

MP18 — Mon, 20 May 2019 15:18:15 GMT

It is Cypress Modem Running IPSEC - Ikev1

Re: ( description contains 'Deleting a possible stale phase-1 SA. cookie:d70d3ea988b0f5c9:c487910ab4

MP18 — Mon, 20 May 2019 15:17:54 GMT

Many Thanks for answering the question