IPsec tunnel dont reastablish connection after powerloss

RouterOS General
1

I have an issue with 2x routerboard 450G running the latest routeros. And they have a IPSec tunnel in between

If there is a suddent powerloss on one of them the its unable to reestablish the link.
the only solution i found is to flush the SA on the other router and then send “interesting” trafic from both sides.
(from the internal subnet to the other routers internal subnet on both devices)

Is that normal?

I was thinking about adding a script to the scheduler to make it send a ping everyonce in a while. But i dont think thats a clean solution.

For the configuration i followed this guide
I also tryed starting DPD (10 second max one fail) on both routers but it dosen’t solve the issue.

I will add the configurations but i haven’t got the routers with me now.

Any help will be appreciated.

2

If router comes up faster than DPD can detect that peer was lost, then you may have this problem. Otherwise id DPD detects that peer is dead SAs and phase 1 are deleted.

3

Hmm. That looks about right. Lowering the DPD makes the the SA load correctly.

However even tho the SA is allright i still cant get trafik to the other lan.

If one of the routers try pinging the other it just get timeouts. but as soon router two starts to ping the first one both routers starts to get replyes.

Is there any way to solve that?

Thanks alot for the reply!