Community discussions

MikroTik App

Search found 5 matches

by breal
Fri Jan 28, 2022 11:54 am
Forum: General
Topic: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working
Replies: 45
Views: 26321

Re: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working

1422, but it depends on the authentication header size
by breal
Fri Jan 28, 2022 10:09 am
Forum: General
Topic: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working
Replies: 45
Views: 26321

Re: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working

The issues were related to MTU size.
I was able to solve this by lowering the interface MTU in combination with an MSS clamping rule.
IKEv2 now running fine on 7.1.1
by breal
Mon Jan 24, 2022 8:16 pm
Forum: General
Topic: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working
Replies: 45
Views: 26321

Re: After Upgrade from 6.49.1 to 7.1 ipsec Site-Site not working

Same problems here. http/https sessions are not working. icmp does go through the tunnel

I haven't been able to get my hex-s working again. Rollback to 6.49 didn't fix the issue, even after a clean wipe with netinstall.
It's driving me crazy
by breal
Mon Jun 08, 2020 5:08 pm
Forum: General
Topic: IKEv2 VPN failing due to certificate check [SOLVED]
Replies: 2
Views: 11407

Re: IKEv2 VPN failing due to certificate check [SOLVED]

Thank you, this made me resarch the certificate chain a little more
It was depending on the AddTrust External CA Root which expired May 30th
I replaced it with the USERTrust RSA CA and now its up and running again
by breal
Mon Jun 08, 2020 3:08 pm
Forum: General
Topic: IKEv2 VPN failing due to certificate check [SOLVED]
Replies: 2
Views: 11407

IKEv2 VPN failing due to certificate check [SOLVED]

Hi all, I have had an IKEv2 vpn running succesfully for a while now on my Hex S. Since recent It fails due certificate errors: Jun/08/2020 14:01:24 ipsec requested auth method: RSA Jun/08/2020 14:01:24 ipsec,error unable to get local issuer certificate(20) at depth:1 cert:CN=Sectigo RSA Domain Valid...