Community discussions

MikroTik App
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

VPN not Connect

Mon May 29, 2006 3:30 pm

Hi, I have a tunnel betwen Mikrotik and Cisco Router, when try to connect the Mikrotik log show me this message:

"dequeuing SA request to IP_ADDRESS , phase 1 wait timed out"


Someone can help me please ?



Thanks a lot.

Fernando
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26975
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Mon May 29, 2006 4:19 pm

what kind of tunnel is it and what kind of cisco is it?
 
fpascual
Member Candidate
Member Candidate
Topic Author
Posts: 140
Joined: Mon May 29, 2006 3:17 pm

Mon May 29, 2006 4:33 pm

Thanks for your reply, the remote is a "Cisco 1811" router with "Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version 12.4(2)T".

The Mikrotik Policy:

src-address="IP":any dst-address="IP"/24:any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address="IP" sa-dst-address="IP" proposal=alla manual-sa=none dont-fragment=clear


The Mikrotik Complete log:



may/29/2006 09:47:46 queuing SA request, phase 1 with peer "PEER_IP" will be established
first
may/29/2006 09:47:46 initiating phase 1, starting mode Aggressive (local "LOCAL_IP)
(remote unknown)
may/29/2006 09:47:46 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:47:51 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:47:55 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:48:00 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:48:05 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:48:10 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:48:15 ipsec packet discarded: src="SRC_IP" dst="DST_IP"
may/29/2006 09:48:17 dequeuing SA request to "PEER_IP", phase 1 wait timed out


Thanks !