We have 5 BM3.8-SP5 (on NW6.5-SP6) S2S servers - in the same tree.
Now exactly one tunnel between 2 slaves is not coming up any more. All
other vpn tunnels work fine. So we have 3 servers with tunnels to all
other servers and 2 servers where one tunnel doesn't work, the other
tunnels are up.
There are a lot of different messages, but mainly its like:

Invalid payload length - ID-PAYLOAD payload
Processed ID-PAYLOAD unsuccessful - Received the message in the wrong
state. Lost our reply, dst=xxxx

Any idea?

Rem.: temporary we established now a site-vpn-tunnel with hardware boxes
so that the NDS can sync :-)

Regards, Franz