Kill Responder IP SEC connection

RouterOS Scripting
1

I want to create a scheduled script that check every X minute for ip sec connection. In case IPsec connection on mikrotik side is responder, kill it.

Point of this script is that ipsec connection between mikrotik and ForcePoint NGFW is alot more stable if MIkrotik is initiator.
If Mikrotik is responder, it alot of times just fails or packets not routing correctly. Issue is that ForcePoint is not much compatible with MikroTik.


below command doesnt work.
/ip ipsec active-peers kill-connections [find side=“responder”]

2

it’s easier to disable initialization on the firewall

/ip fi fi
add action=drop chain=input connection-state=new dst-port=500,4500 protocol=udp
add action=drop chain=input connection-state=new protocol=ipsec-esp