IPsec lockup, DPD not working?

RouterOS General
1

Hello!
I have some IPsec tunnels that sometimes seems to get stuck in a locked up state where no data is passed through them. I can not see any real reason, they just randomly decide to stop passing data for a period.
I do have DPD configured but it does not seem to trigger on this for some reason.
From what I can see in my monitoring the tunnel went down 16:21 and up again 16:49. The 1 hour lifetime seems to be what makes the tunnel work again, it is always down under an hour.
I do think this is somehow routeros related because I have other strongswan based devices going against the same Cisco ASA with same config in remote end and they do not act like this, only my mikrotiks do. Tried routeros latest 6.44, 6.45 and now on 6.46.1 with same problem so it does not seem to be a recent issue.
Any tips?

Nothing special in the log:
ipsec2.PNG
Peer settings:
ipsec.PNG

2

What client? I didn’t experience such a thing with StrongSwan. Except that my battery was almost dead overnight because of the 20s keep-alives.
PS: clients log might be useful too.
LE: nevermind. routeros IS the client. skip this post. too early for me.

3

Exactly :slight_smile: No problem, thanks for trying to help anyway :slight_smile:

Anyone else have any idea? I don’t know where to start looking :frowning: