Ronen, You can safely disable keep-alive since we don not need it. It is for connection status detection, but our connections are permanent, and there is no one to answer thos keep-alive packets. Basically it works only between Mikrotiks. Marius, YO2LOJ On 30.05.2017 15:45, R P wrote: > (Please trim inclusions from previous messages) > _______________________________________________ > So with Brians "pressure" on me (HI) i think i have found the problem ... it it the tunnel keep alive > > and now the questions > > 1)Does it necessary to turn it on ? > > 2) why this uses source address of amprGW and destination of my local address maybe its a a bug in the Mikrotik tunnel ? what protocol keep alive uses ? is there anyone else here with mikrotik that have a keep alive open and know if he get same errors from AMPGW ? > > > I have changed the keep alive timing from every 10 to 610 seconds and the errors reduced to 2 every 15 minutes from about 100 > > Ronen - 4Z4ZQ > >