Hi,
I have 2 sites with Mikrotik routers connected by an IPsec tunnel and once every 1 or 2 days, the tunnel will drop.
I am connecting 2 sites with dynamic public IPs and I am using the mynetname DNS name to initiate the connection to the other peer which seems to work at least for the first connection.
But once one of the peers will have its public IP changed, that’s when the tunnel won’t reconnect.
I will be getting on 1 site the following logs repeating indefinitely:
peer sent packet for dead phase2
failed to pre-process ph2 packet.
On the other site, I’ll be getting these:
respond new phase 1 (Identity Protection):XXX.XXX.XXX.XXX[500]<=>XXX.XXX.XXX.XXX[1]
no suitable proposal found.
XXX.XXX.XXX.XXX failed to get valid proposal.
XXX.XXX.XXX.XXX failed to pre-process ph1 packet (side: 1, status 1).
XXX.XXX.XXX.XXX phase1 negotiation failed.
Is there anything I can do to fix that setup?
Thanks in advance.