Disable IKEv2 reconnection

RouterOS General
1

Hi,

I would like to use a script that checks if PH2 state is established and if SA’s are installed, and stop RouterOS from doing automatic reconnections, just like the way tunnels work with the "dial on-demand option’.
I was thinking of a way to disable ‘send initial contact’ option but without dropping the existing ipsec connection.
Anyone knows of a workaround?

I need this because my script can’t catch these reconnects and do the port forward part properly (I use PIA with IKEv2).
I will make new connections manually using script.

2

Why not use a tunnel such as GRE with IKEv2 ?

3

Because I use a VPN provider, they allow L2TP/IPSec but that hammers my hap ac2 CPU while torrenting because of the additional encapsulation.
I managed to do a script which kills connections if the peer uptime is less than 15 seconds and made the script loop every 10s and also connect to a different vpn server.