Hi @NetworkNetwork , thanks for bringing this matter here.   If your tunnel is going down every day, it's usually a racing condition in either Phase-1 or Phase-2 negotiation and SA database; or DPD timers like I mentioned in my first reply.   In some edge cases, it might be related to packet loss in transit between peers.   I would recommend you check the time of day when it goes down and try to find a pattern.   In addition, run MTR with 20 cycles to that Cisco peer right after the the tunnel is down - before even trying to reestablish tunnel.   Doing MTR would tell you if there is some level of packet loss.   After identifying which hop has packet loss, check in a WHOIS tool to find if that hop is within your provider network or some other provider Autonomous System (AS).   ... View more