We have an m7i router with an adaptive services module terminating IPSec VPNs. The VPNs are assocaited with sp interfaces, we have one sp interface that is bouncing fairly regularly. I believe the sp interface goes down when there is no active phase 1 tunnel, but I'm not certain of that.
I don't see anything obviously wrong in the /var/kmd, or /var/messages log files. What would be the best trouelshooting methodoligy to determine exactly what is going on?
We run many VPNs so the kmd and messages logs are pretty extensive. I am attaching a text file with some KMD logs filtered to the end point IP of the VPN, at the begining of the file are messages from the messages file showing the sp interface going down, so you can correspond that with the kmd messages. I'll also see about providing some config. Not that the phase 1 and 2 timers are set to 300 seconds.
