Using IPSEC tunnels, and all of a sudden on of my tunnels goes down. I have syslog running on both the hub and the spoke locaitons. It looks like the hub location goes down first, then the spoke 1 second thereafter.
What would issue this command to bring my vti1 down?
Jun 30 11:25:00 ER-CPE-HUB sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ip link set vti1 down
Jun 30 11:25:00 ER-CPE-HUB sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 30 11:25:00 ER-CPE-HUB netplugd: vti1: ignoring event
Jun 30 11:25:00 ER-CPE-HUB sudo: pam_unix(sudo:session): session closed for user root
Jun 30 11:25:01 ER-CPE-HUB ntpd: Deleting interface #74 vti1, 172.16.200.2#123, interface stats: received=0, sent=0, dropped=0, active_time=84286 secs
Jun 30 11:25:01 ER-CPE-SPOKE sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/sbin/ip link set vti0 down
Jun 30 11:25:01 ER-CPE-SPOKE sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Jun 30 11:25:01 ER-CPE-SPOKE netplugd: vti0: ignoring event
Jun 30 11:25:01 ER-CPE-SPOKE sudo: pam_unix(sudo:session): session closed for user root
Jun 30 11:25:03 ER-CPE-SPOKE ntpd: Deleting interface #51 vti0, 172.16.200.3#123, interface stats: received=0, sent=0, dropped=0, active_time=84286 secs
Jun 30 11:25:36 ER-CPE-SPOKE sudo: root : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/bin/vtysh.pl -c show ip route summary json
Thank you for any help in advance.
