OpenBSD 5.9
Настроил ipsec

FLOWS:
flow esp in from 10.0.10.0/24 to xxx.1 peer 176.111.61.104 srcid xxx.1/32 dstid xxx.2/32 type use
flow esp out from xxx.1 to 10.0.10.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type require
flow esp in from 10.0.10.0/24 to 10.10.6.0/24 peer 176.111.61.104 srcid xxx.1/32 dstid xxx.2/32 type use
flow esp out from 10.10.6.0/24 to 10.0.10.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type require
flow esp in from 10.0.10.0/24 to 10.10.10.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type use
flow esp out from 10.10.10.0/24 to 10.0.10.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type require
flow esp in from 10.0.10.0/24 to 10.10.3.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type use
flow esp out from 10.10.3.0/24 to 10.0.10.0/24 peer xxx.2 srcid xxx.1/32 dstid xxx.2/32 type require

SAD:
esp tunnel from xxx.2 to xxx.1 spi 0x0fc51f3d auth hmac-sha2-256 enc aes
esp tunnel from xxx.1 to xxx.2 spi 0x301d301a auth hmac-sha2-256 enc aes
esp tunnel from xxx.2 to xxx.1 spi 0x42943162 auth hmac-sha2-256 enc aes
esp tunnel from xxx.2 to xxx.1 spi 0x463d0ba3 auth hmac-sha2-256 enc aes
esp tunnel from xxx.1 to xxx.2 spi 0x8a9ca3ce auth hmac-sha2-256 enc aes
esp tunnel from xxx.1 to xxx.2 spi 0x97d33da5 auth hmac-sha2-256 enc aes
esp tunnel from 176.111.61.104 to 195.211.111.112 spi 0xb2da5793 auth hmac-sha2-256 enc aes
esp tunnel from xxx.1 to xxx.2 spi 0xc4b21474 auth hmac-sha2-256 enc aes

ipsec1.conf

local_net="{ 10.10.10.0/24, 10.10.3.0/24, 10.10.6.0/24 }"

ike esp from $local_net to 10.0.10.0/24 peer xxx.2
ike esp from xxx1/32 to 10.0.10.0/24 peer xxx.2
ike esp from xxx.1/32 to xxx2/32

ipsec2.conf

remote_nets="{ 10.10.10.0/24, 10.10.3.0/24, 10.10.6.0/24 }"

ike esp from 10.0.10.0/24 to $remote_nets peer xxx.1
ike passive esp from xxx.2/32 to $remote_nets peer xxx.1
ike esp from xxx.2/32 to xxx.1/32

PF.conf согласно мануалам

делал так
http://www.kernel-panic.it/openbsd/vpn/vpn3.html
и так
https://www.opennet.ru/base/sec/ipsec_openbsd.txt.html

пропадают ping  с завидной регулярностью рвется связь
а это раздражает больше всего
Jun  6 19:52:47 gatedata isakmpd[25396]: udp_create: no address configured for "peer-default"
Jun  6 19:52:47 gatedata isakmpd[25396]: exchange_establish: transport "udp" for peer "peer-default" could not be created

Помогите разобраться!!!!
перечитал кучу man!