Hi! I just upgraded my phone to Android 13 to discover that L2TP/IPsec VPN does not work anymore. :-) So, I read, one has to move to IKEv2. I googled for a while, read a few notes different people did (this, for example, https://forum.mikrotik.com/viewtopic.php?t=199559). My router (RB2011) also use...

Any reason for the older firmware?
I think update firmware will be advice a lot give on this.

I updated the firmeware on a different router and found that my L2TP/IPsec connections got broken. So, I stopped updating on this router.

Hi! I have a RB2011UIAS-RM (with an old firmware 6.7) that is working just fine except that one of the Ethernet ports sometimes stops working for a few seconds and then starts again. I am trying to diagnose what is happening there because I suspect this is sometging related to a rather funky device ...

Hi! I have an L2TP/IPsec configured on Mikrotik (v6.7) and it works just fine as peer-to-peer and from Android phone. However, trying to connect with l2tp plugin of the NetworkManager on Linux (I am using strongswan) always fails. This is my Mikrotik configuration: /ip pool add name=l2tp-pool ranges...

Hi,

I managed to connect to L2TP/IPsec server on MikroTik from Ubuntu 14.04 using this:

https://launchpad.net/l2tp-ipsec-vpn
http://wiki.l2tpipsecvpn.tuxfamily.org/ ... =Main_Page

Do you have a parameter IPsec ID?

HI! I have an L2TP/IPsec configured on Mokrtik and can connect to it from Android devices. I also need to connect from a few Linux notebooks where users would preferably use NetworkManager's plugins for that. I tried to do this and could not connect. VPNC asks for group-id which I do not know where ...

Peer settings are phase1. Proposal settings are phase2 Most likely these errors are for phase2, so check if you have correct settings in ./ip ipsec proposal. This is rather strange. Here is my proposal settings [vomus@Safianovo] > /ip ipsec proposal print Flags: X - disabled, * - default 0 * name=&...

Went through the logs, here is the problems: May/02/2014 13:15:33 ipsec,debug trns_id mismatched: my:3DES peer:AES-CBC May/02/2014 13:15:33 ipsec,debug trns_id mismatched: my:3DES peer:AES-CBC May/02/2014 13:15:33 ipsec,debug authtype mismatched: my:hmac-md5 peer:hmac-sha1 May/02/2014 13:15:33 ipse...

Few things:
set passive=yes and send-initial-contact=no

If that doesnt work, try to switch
generate-policy=port-strict to generate-policy=port-override

Doesn't help...

Hi! I am trying to set up a remote L2TP/IPsec connection to a Mikrotic 2011UiAS-RM: /ip pool add name=l2tp-pool ranges=10.161.1.104-10.161.1.112 /ppp profile add name=L2TP local-address=10.161.1.101 remote-address=l2tp-pool \ dns-server=10.161.0.1 change-tcp-mss=yes address-list=L2TP_Clients /ppp se...

Hi! I have to Mikrotik routers (2011UAS with RouterOS 6.11 and 951G-2HnD with RouterOS 5.26). Before the second router appeared I had a L2TP/IPsec configured and could log in to my network from mobile phones. After the second router appeared, I configured a site-to-site IPsec connection between the ...

Hello,
just a quick thought, do you have proxy-arp enabled on the interface facing your internal network?

Have a look at the wiki page for PPTP and it describes it there. I believe it is still applicable in your case.

Hi! It worked! Thanks. How come none has corrected an IPsec wiki page...

Post your exports Sent from my SCH-I545 using Tapatalk The version is 6.7 and firewall exports are below # jan/25/2014 09:13:24 by RouterOS 6.7 # software id = R9KJ-T416 # /ip firewall filter add chain=input comment="Allow Established connections" connection-state=established add chain=fo...

Hi! I am trying to configure an L2TP/IPsec connection between my Mikrotik and an Android phone. Reading http://wiki.mikrotik.com/wiki/MikroTik_RouterOS_and_Windows_XP_IPSec/L2TP on the wiki seemed like a rather straightforward setup which I followed. Everything went fine and I even connected to my r...

Hi! I am trying to set up a VPN/IPsec connection to my router. Reading on wiki and all around I winded up with the following: /ip pool add name=l2tp-pool ranges=10.161.1.102-10.161.1.112 /ppp profile add name=L2TP local-address=10.161.1.101 remote-address=l2tp-pool address-list=L2TP_Clients /ppp sec...

Hi, I am trying to update dynamic DNS (no-ip.com) and it seems that scripts that are flying around the net are not working because no-ip.com wants User-Agent set when making a http request. Does anyone know how one can achieve this with the fetch command? I do not seem to be able to find anything ab...