One unique tunnel showing this eror: connection expiring due to phase1 down...Someone maybe help in?

[hermanleao]

That's the debug result.

Thanks a lot

2025-05-13 16:50:42.481085 ike 0:pf-iraucuba:260876: out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
2025-05-13 16:50:42.481131 ike 0:pf-iraucuba:260876: sent IKE msg (P1_RETRANSMIT): 186.249.182.226:500->179.42.154.7:500, len=372, vrf=0, id=05040622febf1177/0000000000000000
2025-05-13 16:50:43.960359 ike 0:pf-iraucuba2:260888: out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
2025-05-13 16:50:43.960403 ike 0:pf-iraucuba2:260888: sent IKE msg (P1_RETRANSMIT): 45.160.124.26:500->179.42.154.7:500, len=372, vrf=0, id=aa0338abe977246e/0000000000000000
2025-05-13 16:50:45.970038 ike 0:pf-iraucuba2:pf-iraucuba2: IPsec SA connect 17 45.160.124.26->179.42.154.7:0
2025-05-13 16:50:45.970097 ike 0:pf-iraucuba2:pf-iraucuba2: using existing connection
2025-05-13 16:50:45.970104 ike 0:pf-iraucuba2:pf-iraucuba2: config found
2025-05-13 16:50:45.970110 ike 0:pf-iraucuba2: request is on the queue
2025-05-13 16:50:46.050218 ike shrank heap by 159744 bytes
2025-05-13 16:50:46.530039 ike 0:pf-iraucuba:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:0
2025-05-13 16:50:46.530095 ike 0:pf-iraucuba:pf-iraucuba: using existing connection
2025-05-13 16:50:46.530102 ike 0:pf-iraucuba:pf-iraucuba: config found
2025-05-13 16:50:46.530109 ike 0:pf-iraucuba: request is on the queue
2025-05-13 16:50:49.968492 ike 0:pf-iraucuba2:260888: out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
2025-05-13 16:50:49.968565 ike 0:pf-iraucuba2:260888: sent IKE msg (P1_RETRANSMIT): 45.160.124.26:500->179.42.154.7:500, len=372, vrf=0, id=aa0338abe977246e/0000000000000000
2025-05-13 16:50:50.980037 ike 0:pf-iraucuba2:pf-iraucuba2: IPsec SA connect 17 45.160.124.26->179.42.154.7:0
2025-05-13 16:50:50.980061 ike 0:pf-iraucuba2:pf-iraucuba2: using existing connection
2025-05-13 16:50:50.980068 ike 0:pf-iraucuba2:pf-iraucuba2: config found
2025-05-13 16:50:50.980074 ike 0:pf-iraucuba2: request is on the queue
2025-05-13 16:50:51.480852 ike 0:pf-iraucuba:260876: negotiation timeout, deleting
2025-05-13 16:50:51.480899 ike 0:pf-iraucuba: connection expiring due to phase1 down
2025-05-13 16:50:51.480907 ike 0:pf-iraucuba: deleting
2025-05-13 16:50:51.480914 ike 0:pf-iraucuba: deleted
2025-05-13 16:50:51.480921 ike 0:pf-iraucuba: schedule auto-negotiate
2025-05-13 16:50:51.540044 ike 0:pf-iraucuba:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:0
2025-05-13 16:50:51.540070 ike 0:pf-iraucuba:pf-iraucuba: config found
2025-05-13 16:50:51.540087 ike 0:pf-iraucuba: created connection: 0xa02eb90 18 186.249.182.226->179.42.154.7:500.
2025-05-13 16:50:51.540098 ike 0:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:500 negotiating
2025-05-13 16:50:51.540107 ike 0:pf-iraucuba: no suitable ISAKMP SA, queuing quick-mode request and initiating ISAKMP SA negotiation
2025-05-13 16:50:51.540116 ike 0:pf-iraucuba:260894: initiator: main mode is sending 1st message...
2025-05-13 16:50:51.540132 ike 0:pf-iraucuba:260894: cookie 0841b1ccb276185a/0000000000000000
2025-05-13 16:50:51.540145 ike 0:pf-iraucuba:260894: out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
2025-05-13 16:50:51.540170 ike 0:pf-iraucuba:260894: sent IKE msg (ident_i1send): 186.249.182.226:500->179.42.154.7:500, len=372, vrf=0, id=0841b1ccb276185a/0000000000000000
2025-05-13 16:50:54.543415 ike 0:pf-iraucuba:260894: out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
2025-05-13 16:50:54.543455 ike 0:pf-iraucuba:260894: sent IKE msg (P1_RETRANSMIT): 186.249.182.226:500->179.42.154.7:500, len=372, vrf=0, id=0841b1ccb276185a/0000000000000000
2025-05-13 16:50:55.990044 ike 0:pf-iraucuba2:pf-iraucuba2: IPsec SA connect 17 45.160.124.26->179.42.154.7:0
2025-05-13 16:50:55.990078 ike 0:pf-iraucuba2:pf-iraucuba2: using existing connection
2025-05-13 16:50:55.990100 ike 0:pf-iraucuba2:pf-iraucuba2: config found
2025-05-13 16:50:55.990106 ike 0:pf-iraucuba2: request is on the queue
2025-05-13 16:50:56.550045 ike 0:pf-iraucuba:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:0
2025-05-13 16:50:56.550073 ike 0:pf-iraucuba:pf-iraucuba: using existing connection
2025-05-13 16:50:56.550096 ike 0:pf-iraucuba:pf-iraucuba: config found
2025-05-13 16:50:56.550102 ike 0:pf-iraucuba: request is on the queue
2025-05-13 16:51:00.540284 ike 0:pf-iraucuba:260894: out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
2025-05-13 16:51:00.540326 ike 0:pf-iraucuba:260894: sent IKE msg (P1_RETRANSMIT): 186.249.182.226:500->179.42.154.7:500, len=372, vrf=0, id=0841b1ccb276185a/0000000000000000
2025-05-13 16:51:01.000035 ike 0:pf-iraucuba2:pf-iraucuba2: IPsec SA connect 17 45.160.124.26->179.42.154.7:0
2025-05-13 16:51:01.000059 ike 0:pf-iraucuba2:pf-iraucuba2: using existing connection
2025-05-13 16:51:01.000066 ike 0:pf-iraucuba2:pf-iraucuba2: config found
2025-05-13 16:51:01.000072 ike 0:pf-iraucuba2: request is on the queue
2025-05-13 16:51:01.560039 ike 0:pf-iraucuba:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:0
2025-05-13 16:51:01.560063 ike 0:pf-iraucuba:pf-iraucuba: using existing connection
2025-05-13 16:51:01.560070 ike 0:pf-iraucuba:pf-iraucuba: config found
2025-05-13 16:51:01.560077 ike 0:pf-iraucuba: request is on the queue
2025-05-13 16:51:01.960329 ike 0:pf-iraucuba2:260888: out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
2025-05-13 16:51:01.960372 ike 0:pf-iraucuba2:260888: sent IKE msg (P1_RETRANSMIT): 45.160.124.26:500->179.42.154.7:500, len=372, vrf=0, id=aa0338abe977246e/0000000000000000
2025-05-13 16:51:06.010046 ike 0:pf-iraucuba2:pf-iraucuba2: IPsec SA connect 17 45.160.124.26->179.42.154.7:0
2025-05-13 16:51:06.010104 ike 0:pf-iraucuba2:pf-iraucuba2: using existing connection
2025-05-13 16:51:06.010110 ike 0:pf-iraucuba2:pf-iraucuba2: config found
2025-05-13 16:51:06.010117 ike 0:pf-iraucuba2: request is on the queue
2025-05-13 16:51:06.570045 ike 0:pf-iraucuba:pf-iraucuba: IPsec SA connect 18 186.249.182.226->179.42.154.7:0
2025-05-13 16:51:06.570103 ike 0:pf-iraucuba:pf-iraucuba: using existing connection
2025-05-13 16:51:06.570110 ike 0:pf-iraucuba:pf-iraucuba: config found
2025-05-13 16:51:06.570116 ike 0:pf-iraucuba: request is on the queue

[funkylicious]

most likely there are some negotiation issues in regards to the Phase1 between the peers.

check all settings and make sure they match on both side, peer ips, encryption/hash etc, make sure that you have the firewall rules and routes in place in order to bring it up.

[hermanleao]

Thanks funkylicious, man.

Pal I sure about the match on both side, peer ips, encryption/hash etc, and i sure that i have the firewall rules and routes in place in order to bring it up. I have more 12 tunnels in same set and ups. I suspected of mikrotik router rb 750 on other side. You know some issues with this piece of mikrotik router rb 750 and fortigate 7.2.10? If you have some tips, I appreciate.  Thanks man.

See ya.

Preview