IKEv2 dpd + auto=route + tunnel downtime cause additional CHILD_SAs
I encountered the following bug:
When an IKEv2 tunnel withdpdaction=restart and auto=route is down
and traffic reaches the host with a matching policy for that tunnel,
additional CHILD_Sas will be spawned the next time the tunnel is established again.
Also, reauthentication events are acted upon. See the attachements "gw1.log" and "gw2.log"
for details. ipsec.conf of the two sides is in the corresponding _ipsec.conf files.