IPSec tunnels between 3 sites with one site using Dynamic IP

Hi all,

After searching the forum for a solution without success, I finally end up asking because I cannot find a way to solve the current issue I’m experiencing. Any help would be very much appreciated indeed.

Here is our configuration:

  • We are running IPSec tunnels between 3 sites.
  • 2 sites have a static public IP address (named here sites STATIC1 & STATIC2)
  • 1 site has a dynamic public IP address (named here site DYN1)

The dynamic IP address part has been successfully implemented using the script at :
http://wiki.mikrotik.com/wiki/Dynamic_DNS_Update_Script_for_DNSoMatic.com_behind_NAT

The issue happens between sites STATIC1 & DYN1. The VPN comes sometimes up, and comes down after a day, even if the site DYN1 public IP address has not been changed. After killing a few times the connections, vpn can come up for a few seconds, or not.
The weird thing is that vpn between STATIC2 & DYN1 is ALWAYS up, at ALL time. If the connections are killed, vpn between those 2 sites is re-established immediately. If DYN1 IP address is changed, above mentionned script runs perfectly and vpn is again re-established immediately.
NOT with site STATIC1.

STATIC1 runs ROS 6.4 on RB751G-2HnD
STATIC1 & DYN1 run ROS 6.4 on RB450G

Thanks for any help,
Ekka