12-13-2019 04:45 AM - edited 12-13-2019 04:47 AM
This doesn't make sense...If the problem is in the fragmented IKE packets, you shouldn't be able to build the tunnel at all. All of the renegotiation will contain packets bigger than 1500bytes and will be dropped.
VPNs going down after particular time usually happen if there is lifetime mismatch between the peers.
Check the lifetime on both ends of the tunnel for phase1 and phase2. Check also if they both use the same metric - seconds, or bytes, or both.
Also insist for deeper investigation from Oracle. The answer they have provide looks more like dust in the eyes, than plausible case.
