pro vpn pouzivam l2tp/ipsec. Puvodne jsem mel jako koncentrator rb1200, pak pretahl conf. do rb3011 a vse fungovalo. Nyni jsem conf. pretahl do nové rb4011 a zcela nahodile se rozpadnou vsechny ipsec tunely najednou (nekdy po nekolika hodinach, nekdy za par minut) pomuze az reboot. ros 6.46.4, ale zkousel jsem i starsi a stejny vysledek.
log
04:44:21 ipsec,info purging ISAKMP-SA x.x..74.130[4500]<=>37.188.251.65[17509] spi=7bad484075e208cf:f97be9c7aa184177.
04:44:21 ipsec,info ISAKMP-SA deleted x.x..74.130[4500]-37.188.251.65[17509] spi:7bad484075e208cf:f97be9c7aa184177 rekey:1
04:44:30 ipsec,info respond new phase 1 (Identity Protection): x.x..74.130[500]<=>37.188.251.65[7044]
04:44:31 ipsec,info ISAKMP-SA established x.x..74.130[4500]-37.188.251.65[17509] spi:b54c10aea7822b9a:de833ad352ce9456
04:44:55 ipsec,info purging ISAKMP-SA x.x..74.130[4500]<=>37.188.251.65[17509] spi=b54c10aea7822b9a:de833ad352ce9456.
04:44:55 ipsec,info ISAKMP-SA deleted x.x..74.130[4500]-37.188.251.65[17509] spi:b54c10aea7822b9a:de833ad352ce9456 rekey:1
04:45:04 ipsec,info respond new phase 1 (Identity Protection): x.x..74.130[500]<=>37.188.251.65[7044]
04:45:05 ipsec,info ISAKMP-SA established x.x..74.130[4500]-37.188.251.65[17509] spi:d21ce7e08b56ace8:5d3031db68a775a5
04:45:29 ipsec,info purging ISAKMP-SA x.x..74.130[4500]<=>37.188.251.65[17509] spi=d21ce7e08b56ace8:5d3031db68a775a5.
04:45:29 ipsec,info ISAKMP-SA deleted x.x..74.130[4500]-37.188.251.65[17509] spi:d21ce7e08b56ace8:5d3031db68a775a5 rekey:1
04:45:38 ipsec,info respond new phase 1 (Identity Protection): x.x..74.130[500]<=>37.188.251.65[7044]
04:45:39 ipsec,info ISAKMP-SA established x.x..74.130[4500]-37.188.251.65[17509] spi:21c4114febfdfada:9011993eaf0369bc
Dokaze nekdo poradit ? diky
