We have four different sites connected with IPSec tunnels between RouterOS installations. Once in a while (every few days) one of the tunnels breaks down and comes back up about 15-20 minutes later. Both phase 1 and phase 2 are still established and DPD shows that the remote peers are indeed alive. There’s just no traffic going via the tunnel any more. At the same time I see in-state-protocol-errors rapidly increasing. Does anyone know what this counter values actually means and a solution to this problem?