Hello.
I have a Mikrotik connected to StrongSwan by IKE2. But every 30 minutes in log wrote error: “IPsec-SA expired before finishing rekey”.
Config StrongSwan:
config setup
charondebug="ike 1, knl 1, cfg 0"
uniqueids=no
conn ikev2-vpn
auto=add
compress=no
type=tunnel
keyexchange=ikev2
fragmentation=yes
forceencaps=yes
dpdaction=clear
dpddelay=30s
rekey=no
left=%any
leftid=***.xyz
leftcert=fullchain.pem
leftsendcert=always
leftsubnet=0.0.0.0/0
right=%any
rightid=%any
rightauth=eap-mschapv2
rightsourceip=10.10.10.0/24
rightdns=1.1.1.1,1.0.0.1,8.8.8.8,8.8.4.4
rightsendcert=never
eap_identity=%identity
ipsec proposal:
Flags: X - disabled, * - default
0 * name="default" auth-algorithms=sha1 enc-algorithms=aes-128-cbc lifetime=30m pfs-group=modp1024
1 name="ike2" auth-algorithms=sha1 enc-algorithms=aes-128-cbc lifetime=8h pfs-group=none