fortigate ipsecvpn 故障之单向通讯

hub端、spoke端 FortiOS 版本 7.2.13
以下是诊断对比

通过命令查看 diagnose vpn ike gateway list

故障发生时，单向通信时 hub--> spoke 不通；spoke--> hub通
对比正常情况下，当spoke拨号重置后，发起隧道建立后，tun_id有变化。
HUB端查看
vd: root/0
name: SHCTC-VPN_10
version: 1
interface: wan1 17
addr: 116.23.21.6:500 -> 12.21.27.142:500
tun_id: 10.0.0.55/::10.0.2.8
remote_location: 0.0.0.0
network-id: 0
virtual-interface-addr: 192.168.2.1 -> 192.168.2.23
created: 37557s ago

正常情况（故障发生时，一般都是重启spoke端）客户端重新拨号获取新地址
HUB端查看
vd: root/0
name: SHCTC-VPN_10
version: 1
interface: wan1 17
addr: 116.23.21.6:500 -> 90.14.229.94:500
tun_id: 192.168.2.23/::10.0.2.12
remote_location: 0.0.0.0
network-id: 0
virtual-interface-addr: 192.168.2.1 -> 192.168.2.23
created: 248s ago

case工单，工程师建议参考以下文章
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Dial-up-IPsec-tunnel-ID-for-OSPF-neighbors-are-not/ta-p/418305

建议升级到 FortiOS 7.4.11再观察一段，
经过两周观察，故障现象消失