I have VNet with a VGateway (VPN Type: Route-Based) with multiple Site-to-Site IPsec IKEv2 connections. All of the connections always show "Connected" on the VGateway and on the remote devices. When I first establish each connection, they work perfectly for exactly 1 hour/3600 seconds. After 1 hour, the connections are still active but no traffic is allowed.
If I reset a single tunnel in Azure, it will start working immediately for exactly 1 hour, but any tunnels not reset will continue to not work.
If I reset the VGateway in Azure, all tunnels will start working immediately for exactly 1 hour.
On the remote devices:
1. Phase1 Lifetime is 28800
2. Phase2 Lifetime is 3600
3. DPD - I tried 45 and 120 (I ensured the DPD matched on both ends)
On the VGateway connections, I tried setting the "Connection Mode" to "Default" and "InitiatorOnly" with the same results. The connections' configurations are:
1. Use Azure Private IP Address = Disabled
2. BGP = Disabled
3. IPsec/IKE policy = Disabled
4. Use policy based traffic selector = Disabled
5. DPD timeout in seconds = Currently 120, but I have tried 45 as well and ensure matching settings in Azure and Remote Device.
6. Connection Mode = Default
7. IKE Protocol = IKEv2
8. Ingress NAT Rules = 0 selected
9. Egress NAT Rules = 0 selected
The VGateway SKU is VpnGw2 and active-active mode is disabled.
I don't know what to try next.