my mikrotik-to-mikrotik ipsec tunnel fails to renew after the lifetime expires and I have to manually kill it so it recovers. strangely I have few other Draytek routers connecting to the same mikrotik concentrator and that tunnels are renewing seamlessly.
ipsec config on my mikrotik concentrator:
# aug/21/2014 21:38:45 by RouterOS 6.7
# software id = HSH6-TY80
#
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=md5,sha1 enc-algorithms=des,3des,aes-128-cbc,aes-192-cbc,aes-256-cbc,blowfish,twofish,camellia-128,camellia-192,camellia-256 lifetime=1h pfs-group=none
/ip ipsec peer
add dpd-interval=disable-dpd enc-algorithm=3des generate-policy=port-override hash-algorithm=md5 lifetime=8h nat-traversal=yes secret=XXXXXXXXX send-initial-contact=no
/ip ipsec policy
end the mikrotik client
# feb/04/1970 22:42:10 by RouterOS 6.18
# software id = GBQH-KCJ8
#
/ip ipsec peer
add address=X.X.X.X/32 dpd-interval=disable-dpd enc-algorithm=3des hash-algorithm=md5 lifetime=8h secret=XXXXXXXXX
/ip ipsec policy
add action=none dst-address=192.168.88.0/24 sa-dst-address=:: sa-src-address=::
add dst-address=192.168.0.0/16 sa-dst-address=:: sa-src-address=:: src-address=192.168.88.0/24 tunnel=yes
any idea why the tunnel between mirkotiks doesn’t renew?
thanks,
Antony.