Config export migration v6 to v7: l2tp dial-on-demand first did not work, then it did

Hello,

I’ve had this in my v6.47.9 (hAP lite) config export:

/ppp profile add change-tcp-mss=yes idle-timeout=1m name=def-enc-ondemand use-encryption=yes

/interface l2tp-client add allow-fast-path=yes connect-to=[server] dial-on-demand=yes disabled=no ipsec-secret=[secret] keepalive-timeout=disabled name=l2tp-ondemand password=[password] profile=def-enc-ondemand use-ipsec=yes user=[user]

which it managed to import (from text export, line by line being individually pasted), with no errors, into 7.12.1 (on an RB3011)

But it did not want to correctly work - the client connection went on to establish immediately after enabling it, and went on to re-establish itself every minute, did not ever go idle, ‘waiting for packets’ for long enough to notice. ppp debug log did show it go ‘inactive’ and disconnecting, then immediately reactivating itself.

I have replicated by hand other paraphernalia, like ensuring no ND is sent (or listened) off this interface, and then a little more restrictive rule for NAT over the interface - but it did not help.

(edit, i also did not reboot the 3011 after import :confused: )

Eventually, after checking/changing every option that made sense to touch (idle timeout, bridge learning, allow fast path) and returning it back to original state in winbox, it started working as it should, with this outcome in export:

/ppp profile add change-tcp-mss=yes idle-timeout=1m name=def-enc-ondemand use-encryption=yes

/interface l2tp-client add allow-fast-path=yes connect-to=[server] dial-on-demand=yes disabled=no ipsec-secret=[secret] keepalive-timeout=disabled name=l2tp-ondemand password=[password] profile=def-enc-ondemand use-ipsec=yes user=[user]

(yes it is identical to what exported off v6… )

Did anybody encounter something like this with v7 replicating the v6 config, in particular on l2tp/ipsec connection with dial-on-demand?

Hopefully the above makes sense…?

The ‘edit’ above is important as i’ve just checked on another router I tried this on before (same idea, l2tp/ipsec connection with dial-on-demand from an export, with actually exactly the same lines as above) that did not work - so i left it disabled - but that router has been rebooted since - and today i reenabled the l2tp connection and… it appears to be functioning normally now? So it would seem, that a reboot after import is clearing something in this area?