DMVPN beetwen RUTX11 and RUT241 not stable

[vivarock12]

i Have a DMVPN HUB with a RUTX11 and several RUT241 and RUT240 but for somw reason i keep seeing my IPSEC-tunnel restarts everytime.

some of them just keep restarting from seconds of working or maybe minutes, is the any reason for that to keep hapenning?

hubs config

SPOKES CONFIG:

sorry for the mess

RUTX11 - version - RUTX_R_00.07.11.1
RUT241 - version - RUT2M_R_00.07.09.1
RUT241 - version - RUT2_R_00.07.06.16

[flebourse]

Hello,

You haven’t set the IKE Lifetime and Lifetime. Try with 3h and 1h and check if the tunnel becomes stable.

Regards,

[vivarock12]

Ok, I thought the duration was set by default, but you are right in the manual.

https://wiki.teltonika-networks.com/view/RUT241_VPN

I’ll try it right now and let you know how it goes.

[vivarock12]

just tested on 3 different devices:
161, 167 and 170
phase 1 3h and
phase 2 1h

but the devices still wont be stable.

config on HUBs:

config on SPOKEs:

any other idea?

[flebourse]

@vivarock12

any other idea?

Without the logs it is hard to tell what could be wrong.
Connect only one client, the traces will be easier to read.

[Marija]

Hello @vivarock12 ,

I have sent you a form to fill out. Once it is completed, I will contact you privately regarding the troubleshoot file. Please use “10952” as the ticket ID.

Best regards,

[vivarock12]

@Marija

I will contact you privately regarding the troubleshoot file. Please use “10952” as the ticket ID.

Best regards,

thanks Marija i just responded your Form.

[vivarock12]

@Marija Havent recived your email, thanks for the help by the way.

[Marija]

Hello,

An email was sent to you on December 13. Could you please check your inbox and spam folder?
I will resend the email shortly. Please let me know if you receive it.

Best regards,

[vivarock12]

yes @Marija your rigth i just saw the email. sorry for the inconvenience and to let you know i just send you the TSHOOT file with a topology of the configuration as reference.

thanks for the help.

[vivarock12]

did the upgrade you guy told me on every device, and some changes on the DMVPN parameters and the tunnel now stay, up thanks for help.

In case someone is having trouble doing a DMVPN with mobile connections this is the configuration that work in my case.

!
!
HUB CONFIG:

!
IPSEC

!
NHRP

!
!
SPOKE CONFIG:

!
IPSEC

!
!
and using BGP for the routing between sites.
!
Reference guides
RUTX DMVPN - Teltonika Networks Wiki
!
DMVPN with IPsec Phase 3 - Teltonika Networks Wiki
!

[Marija]

Hello,

I’m glad to hear the issue is resolved! Thank you for sharing your configurations with other users.

If you have any further questions or concerns, please don’t hesitate to ask on the forum.

Best regards,