Community discussions

MUM Europe 2020
 
magic196
just joined
Topic Author
Posts: 1
Joined: Mon Jan 13, 2020 4:54 pm

peer sent packet for dead phase2

Mon Jan 13, 2020 5:07 pm

Hi, some help would be greatly appreciated.
We ran into an issue on our RB1100AHx2 (running 6.46.1)
It seems that it drops the ipsec tunnels from time to time, and the log shows the following:
x.x.x.x failed to pre-process ph2 packet
x.x.x.x peer sent packet for dead phase2
(x.x.x.x is the Mikrotik)
In Ipsec it shows, that the tunnel is in "no phase2" state.
The weird thing about it is that the tunnel works fine with no issues, then it suddenly goes to "no phase2", but once I open the Tunnel settings and click "Apply" (without changing ANY settings), the tunnel goes back up to the state "Established" and all is workings fine.
The ipsec tunnels are between the Mikrotik and a Cisco ASA. I have read that there are some issues with ipsec if it is created between a Mikrotik and a different vendor equipment, but haven't found a thread with a similar issue.

Who is online

Users browsing this forum: bgpro, marisspringis, MarkoB, quackyo, srsgroupsro and 122 guests