IPSec IKEv2 rekeying problem

RouterOS General
1

I have the same problem with IPsec tunnel error simulation rekey on VMware NSX Edge with Mikrotik HAP AC RB 962UiGS-5HacT2HnT RouterOS 6.45.6
(Encryption Algorithm:AES, Authentication: PSK, Diffie-Hellman Group: 14, Digest Algorithm: SHA1, IKE Option: IKEv2)VMware Log Inside:
Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> establishing CHILD_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX{2}

10/28/201916:15:28.225

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA request 99 [ N(REKEY_SA) SA No TSi TSr ]

10/28/201916:15:28.225

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (204 bytes)

10/28/201916:15:28.228

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (268 bytes)

10/28/201916:15:28.228

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA response 99 [ N(NO_PROP) ]

10/28/201916:15:28.228

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received NO_PROPOSAL_CHOSEN notify, no CHILD_SA built

10/28/201916:15:28.228

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:28.228

Oct 28 13:15:05 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> CHILD_SA rekeying failed, trying again in 14 seconds

10/28/201916:15:33.972

Oct 28 13:15:11 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 16[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> sending DPD request

10/28/201916:15:33.972

Oct 28 13:15:11 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 16[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> generating INFORMATIONAL request 48

10/28/201916:15:33.972

Oct 28 13:15:11 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 16[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> sending packet: from XXX.XXX.XXX.XXX[4500] to XXX.XXX.XXX.XXX[4500] (76 bytes)

10/28/201916:15:33.975

Oct 28 13:15:11 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> received packet: from XXX.XXX.XXX.XXX[4500] to XXX.XXX.XXX.XXX[4500] (124 bytes)

10/28/201916:15:33.975

Oct 28 13:15:11 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> parsed INFORMATIONAL response 48

10/28/201916:15:35.644

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (716 bytes)

10/28/201916:15:35.644

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA request 57 [ No KE N(REKEY_SA) SA TSi TSr ]

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received proposals: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_2048/NO_EXT_SEQ

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> configured proposals: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> no acceptable proposal found

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA response 57 [ N(NO_PROP) ]

10/28/201916:15:35.645

Oct 28 13:15:13 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (76 bytes)

10/28/201916:15:36.652

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 07[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> establishing CHILD_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX{2}

10/28/201916:15:36.652

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 07[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA request 100 [ N(REKEY_SA) SA No TSi TSr ]

10/28/201916:15:36.652

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 07[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (204 bytes)

10/28/201916:15:36.655

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (220 bytes)

10/28/201916:15:36.655

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA response 100 [ N(NO_PROP) ]

10/28/201916:15:36.655

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received NO_PROPOSAL_CHOSEN notify, no CHILD_SA built

10/28/201916:15:36.655

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:36.655

Oct 28 13:15:14 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 13[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> CHILD_SA rekeying failed, trying again in 15 seconds

10/28/201916:15:39.088

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (700 bytes)

10/28/201916:15:39.088

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA request 58 [ No KE N(REKEY_SA) SA TSi TSr ]

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received proposals: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_2048/NO_EXT_SEQ

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> configured proposals: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> no acceptable proposal found

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA response 58 [ N(NO_PROP) ]

10/28/201916:15:39.089

Oct 28 13:15:16 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 09[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (76 bytes)

10/28/201916:15:42.229

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 08[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> establishing CHILD_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX{2}

10/28/201916:15:42.229

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 08[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA request 101 [ N(REKEY_SA) SA No TSi TSr ]

10/28/201916:15:42.229

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 08[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (204 bytes)

10/28/201916:15:42.234

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (252 bytes)

10/28/201916:15:42.234

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA response 101 [ N(NO_PROP) ]

10/28/201916:15:42.234

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received NO_PROPOSAL_CHOSEN notify, no CHILD_SA built

10/28/201916:15:42.234

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:42.234

Oct 28 13:15:19 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> CHILD_SA rekeying failed, trying again in 6 seconds

10/28/201916:15:45.663

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (716 bytes)

10/28/201916:15:45.663

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA request 59 [ No KE N(REKEY_SA) SA TSi TSr ]

10/28/201916:15:45.663

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received proposals: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_2048/NO_EXT_SEQ

10/28/201916:15:45.663

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[CFG] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> configured proposals: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ

10/28/201916:15:45.663

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> no acceptable proposal found

10/28/201916:15:45.664

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:45.664

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA response 59 [ N(NO_PROP) ]

10/28/201916:15:45.664

Oct 28 13:15:23 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 15[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (76 bytes)

10/28/201916:15:48.234

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> establishing CHILD_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX{2}

10/28/201916:15:48.234

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating CREATE_CHILD_SA request 102 [ N(REKEY_SA) SA No TSi TSr ]

10/28/201916:15:48.234

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (204 bytes)

10/28/201916:15:48.241

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 05[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (220 bytes)

10/28/201916:15:48.241

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 05[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed CREATE_CHILD_SA response 102 [ N(NO_PROP) ]

10/28/201916:15:48.241

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 05[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received NO_PROPOSAL_CHOSEN notify, no CHILD_SA built

10/28/201916:15:48.241

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 05[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> failed to establish CHILD_SA, keeping IKE_SA

10/28/201916:15:48.241

Oct 28 13:15:25 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 05[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> CHILD_SA rekeying failed, trying again in 10 seconds

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (268 bytes)

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> parsed INFORMATIONAL request 60 [ D ]

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> received DELETE for IKE_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX[3]

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> deleting IKE_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX[3] between XXX.XXX.XXX.XXX[XXX.XXX.XXX.XXX]…XXX.XXX.XXX.XXX[XXX.XXX.XXX.XXX]

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> IKE_SA deleted

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> generating INFORMATIONAL response 60

10/28/201916:15:49.759

Oct 28 13:15:27 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|3> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (76 bytes)

10/28/201916:15:51.655

Oct 28 13:15:29 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 07[JOB] CHILD_SA ESP/0xc49e71cd/XXX.XXX.XXX.XXX not found for rekey

10/28/201916:15:58.241

Oct 28 13:15:35 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 12[JOB] CHILD_SA ESP/0xc49e71cd/XXX.XXX.XXX.XXX not found for rekey

source event_type hostname appname

10/28/201916:16:03.973

Oct 28 13:15:41 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> sending DPD request

10/28/201916:16:03.973

Oct 28 13:15:41 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> generating INFORMATIONAL request 49

10/28/201916:16:03.973

Oct 28 13:15:41 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 10[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> sending packet: from XXX.XXX.XXX.XXX[4500] to XXX.XXX.XXX.XXX[4500] (76 bytes)

10/28/201916:16:03.975

Oct 28 13:15:41 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 14[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> received packet: from XXX.XXX.XXX.XXX[4500] to XXX.XXX.XXX.XXX[4500] (108 bytes)

10/28/201916:16:03.975

Oct 28 13:15:41 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 14[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|6> parsed INFORMATIONAL response 49

10/28/201916:16:08.195

Oct 28 13:15:45 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[KNL] creating acquire job for policy YYY.YYY.YYY.YYY/XX[tcp/51760] === YYY.YYY.YYY.YYY/XX[tcp/ssh] with reqid {2}

10/28/201916:16:08.195

Oct 28 13:15:45 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> initiating IKE_SA XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX[7] to XXX.XXX.XXX.XXX

10/28/201916:16:08.198

Oct 28 13:15:45 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]

10/28/201916:16:08.198

Oct 28 13:15:45 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 06[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> sending packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (464 bytes)

10/28/201916:16:08.915

Oct 28 13:15:46 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[NET] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> received packet: from XXX.XXX.XXX.XXX[500] to XXX.XXX.XXX.XXX[500] (429 bytes)

10/28/201916:16:08.915

Oct 28 13:15:46 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[ENC] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ ]

10/28/201916:16:08.915

Oct 28 13:15:46 vse-d4579c4c-1df9-4159-b282-4bc5bd153dde-1 charon: 11[IKE] <XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX-XXX.XXX.XXX.XXX_YYY.YYY.YYY.YYY/XX|7> authentication of ‘XXX.XXX.XXX.XXX’ (myself) with pre-shared key

2

Thank you, the problem was solved after updating to RouterOS 6.45.7 (Stable).
Task Closed.