IPsec connection breaks after 1 hour

[bndt206]

Hi

I'm working on setting up a site-to-site IPsec connection that has been running smoothly for years between an Arista ETM and a Cisco ASA. Now, I'm replacing the Arista ETM with OPNsense. The configuration on the ASA remains unchanged. The tunnel establishes successfully and works fine for about an hour, but then it stops or breaks.

The relevant connection in the logfile.txt is 185.xx.xxx.x to 91.yyy.yyy.yy. The conncection breaks at 2024-12-23T13:23:55 and is reestablished at 2024-12-23T13:24:09:

Info:
OPNsense 24.7.11_2-amd64
FreeBSD 14.1-RELEASE-p6
OpenSSL 3.0.15
StrongSwan 5.9.14
CPU 12th Gen Intel i5-1245U
Mem 16GB
Disk 512GB nvme


/Peter

[bndt206]

I think I've fixed it now.

I ran into another little nag, as tranfferring 4,5'ish GB also broke the connection.
Turns out to be on the ASA, changing the parameters as per the screenshot have fixed most of the isses.
Only ting I haven figured out is why its worked flawlessly for several years.