Have anyone ever seen an SA sourced by intefrace that is in down status??
Let's me explain in more depth: Let's assume I have two locations and have an IPSec tunnel between. When going to backup link, IPSec drops (it is normal thing because of too big delay of switching to backup path), and when it (IPSec tunn) tries to comes up again (trough backup interface) there are SA's sourced by main interface which is in "down" state....
Routers are 7200's....
I got this as a feedback from our operation guys so not 100% sure it is happening for real, but I'm trying to catch that event myself to get some evidence.
In the meantime, anyone have seen this before???