Hello Folks!

On one of our router there is massive inbox logins originating from the dude:

11:04:48 system,info,account user admin logged in from 10.30.0.6 via winbox
11:05:07 system,info,account user admin logged out from 10.30.0.6 via winbox
11:06:08 system,info,account user admin logged in from 10.30.0.6 via winbox
11:06:27 system,info,account user admin logged out from 10.30.0.6 via winbox
11:07:29 system,info,account user admin logged in from 10.30.0.6 via winbox
11:07:48 system,info,account user admin logged out from 10.30.0.6 via winbox
11:08:49 system,info,account user admin logged in from 10.30.0.6 via winbox
11:09:08 system,info,account user admin logged out from 10.30.0.6 via winbox
11:10:09 system,info,account user admin logged in from 10.30.0.6 via winbox
11:10:28 system,info,account user admin logged out from 10.30.0.6 via winbox
11:11:23 system,info,account user admin logged in from 10.30.0.5 via ssh
11:11:29 system,info,account user admin logged in from 10.30.0.6 via winbox
11:11:48 system,info,account user admin logged out from 10.30.0.6 via winbox
11:12:49 system,info,account user admin logged in from 10.30.0.6 via winbox
11:13:08 system,info,account user admin logged out from 10.30.0.6 via winbox
11:14:10 system,info,account user admin logged in from 10.30.0.6 via winbox
11:14:29 system,info,account user admin logged out from 10.30.0.6 via winbox
11:15:30 system,info,account user admin logged in from 10.30.0.6 via winbox
11:15:49 system,info,account user admin logged out from 10.30.0.6 via winbox
11:16:50 system,info,account user admin logged in from 10.30.0.6 via winbox
11:17:09 system,info,account user admin logged out from 10.30.0.6 via winbox
11:18:10 system,info,account user admin logged in from 10.30.0.6 via winbox
11:18:29 system,info,account user admin logged out from 10.30.0.6 via winbox
11:19:31 system,info,account user admin logged in from 10.30.0.6 via winbox
11:19:50 system,info,account user admin logged out from 10.30.0.6 via winbox

Why is that, it does not happen on any other router, I had to block winbox logins from the dude server to mitigate it....

The connection breaks probably so it is reconnecting. Don't use admin user for any purpose. Better to create other user for administration and different user with reduced rights for Dude.

The connection breaks probably so it is reconnecting. Don't use admin user for any purpose. Better to create other user for administration and different user with reduced rights for Dude.

Yup, will convert it all to use another monitor user

Also found the problem, it was as you say, connection breaks due to VPN tunnel problem, some MTU/MRU values had to be reduced.