A. IMHO log shows problem with DH_GROUP: 1024 vs 768 bit
B. Could you make time be more accurate on Mikrotik. We are in 2015 not in 2002.
Thanks "cdiedrich", i have changed pfs-group but it's not working. It is Cisco ASR1002.In your proposal, try to set pfs-group to none or mopd768, if the peer is a PIX firewall.
Magically freezing problem has solved in v3.13. i think its stable v3.13Can anyone plz tell me, which version is stable for dual core. i have tried with v3.13, but freezing.
but did you see the other posts? you can't shutdown, even if it offers you to.