Why does vpn mikrotik hang when building vpn ipsec ikev2?

Question

Mikrotik

Good afternoon, have you met a similar problem, that when the ipsec tunnel ikev2 was spacious, based on the CCR1016-12G models (cpu load around 5%) and 2011UiAS (cpu load around 100%), everything related to vpn stopped working on Mikrotik , the existing ones fell off, it was not possible to check the statistics, it simply is not displayed, while everything else worked, you can connect remotely, check / change other values ​​​​on the router, you can stop this problem only by disabling the external interface through which connections are made, it becomes possible to edit ipsec , turning off the peer and returning the external interface to work, as soon as the peer is turned on again, history repeats itself, I tried the latest firmware 6.40.1 and bugfix only 6.38.7. This tunnel was installed from the windows azure pack data center,

Answer 1

I encountered the problem of IPSec freezing in Mikrotik. This is exactly RB2011-UiAS :) When you enter any command related to IPSec, Mikrotik just blunts until you cancel the command. I do not know what caused it, it is treated by rebooting Mikrotik.