IOS IPSec with L2TP Connection drops when rekey

Hello Fellow Friends,

i hope you are all well,

please i need your help on this mater, i have done alot of research with no luck,

on IOS configured with IPSec with L2TP the Connection drops when it rekey’s,

i have tried everything with no luck,

my Ipsec config

/ip ipsec mode-config
add address-pool=L2TP-IKEv2 address-prefix-length=32 name=cfg1 split-include=
0.0.0.0/0 static-dns=208.67.222.123 system-dns=no
/ip ipsec profile
set [ find default=yes ] dh-group=ecp256,modp2048,modp1536,modp1024
dpd-interval=1h enc-algorithm=aes-256,aes-192,aes-128
add dh-group=modp2048 dpd-interval=1h enc-algorithm=aes-256 hash-algorithm=
sha256 name=Profile-IKEv2
/ip ipsec peer
add exchange-mode=ike2 name=ikev2 passive=yes profile=Profile-IKEv2
send-initial-contact=no
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=“aes-256-cbc,aes-256-ctr,aes-256-gcm,aes
-192-cbc,aes-192-ctr,aes-192-gcm,aes-128-cbc,aes-128-ctr,aes-128-gcm”
lifetime=8h pfs-group=none
/ip ipsec identity
add auth-method=digital-signature certificate=vpn.server generate-policy=
port-strict match-by=certificate mode-config=cfg1 peer=ikev2
remote-certificate=vpn.client remote-id=user-fqdn:vpn.client
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0

i have did some troubleshooting, and attached the debug,

it seems that the Mikrotik is updating the key “rekeying”

but not assigning that new key to the client,

i can see that i have 2 keys one will expire in 10 mins, and another one will expire in 1 hour,

after 10 mins the old key expired and the client VPN connection dropped,

please help,

thank you,
log.txt (2.61 KB)