On 20.04.2018 11:17, Victor Gamov wrote: > All local SA configured and established and remote side (Cisco routers) > report SA established too. > > But traffic goes via only one ipsec-interface.
If you have all SAs established, you probably need to check your routing configuration. Or at least test that addresses configured on the ipsecXX interfaces are reachable. -- WBR, Andrey V. Elsukov
signature.asc
Description: OpenPGP digital signature
