IPSEC to ASA

RouterOS General
1

I have an IPSEC tunnel between a RB450G running RouterOS 5.25 that seems to randomly stop working.

DPD is enabled on the Mikrotik end and I think it’s also enabled on the ASA and as far as I can tell the SA lifetimes match up at each end.

Manually flushing the SA’s on the Routerboard usually fixes it, so I’m guessing it’s a setting somewhere that’s not matching up and thus stopping one of the ends noticing the SA’s need flushing?

Any ideas how to fix it’s becoming quite irritating

2

Upgrading the routerboard to RouterOS 6 seems to have solved it, now Dead peer detection seems to be working properly.

Not sure if it was configuration specific or something wrong with DPD in 5.25