Hi,
I have next question. I’ve established IPSEC tunnel between mikrotik routerboard 600a, with 3.10 licence and Cisco PIX 515.
In order to keep this link alive, I had to ask people from PIX side to ping host (every 5mins) on my internal subnet (in case of power failure or mikrotik router restart). Now I see state=dying and some time after that there is state=mature. i don’t know what that means but tunnel is working in both states. Ande here is print of instaled-sa’s
Flags: A - AH, E - ESP, P - pfs
0 E spi=0xF749D47D src-address=xx.xxx.xx.xxx dst-address=yy.yyy.yy.yyy
auth-algorithm=md5 enc-algorithm=3des replay=4 state=dying
auth-key=“1451167r56c34ae94fb27cf09f188a61”
enc-key=“8bc70907805ae8c9f8cd9fb16bb88ef1f5bb0a2a4a9a50dd”
addtime=jan/03/1970 17:36:31 add-lifetime=6h24m/8h
usetime=jan/03/1970 17:37:59 use-lifetime=0s/0s current-bytes=1800
lifebytes=0/0
1 E spi=0xEC3D469 src-address=yy.yyy.yy.yyy dst-address=xx.xxx.xx.xxx
auth-algorithm=md5 enc-algorithm=3des replay=4 state=dying
auth-key=“df7cfb6brb69665bdc5286db2223ad2e”
enc-key=“4892757od010a288a35f1adbc1a2892a9c6984125360d1e5”
addtime=jan/03/1970 17:36:31 add-lifetime=6h24m/8h
usetime=jan/03/1970 17:37:59 use-lifetime=0s/0s current-bytes=1800
lifebytes=0/0
Any tips?