Had this too. ipsec works, after x hours no traffice but tunnel is still up. I found this: https://mum.mikrotik.com/presentations/EU18/presentation_5143_1523360368.pdf I changed my nat rule. Every example I found for an ipsec tunnel has a nat exclusion rule. On page 53 of this pdf presentation I fou...