Community discussions

MikroTik App
 
ukzerosniper
Member Candidate
Member Candidate
Topic Author
Posts: 129
Joined: Tue Jul 23, 2013 9:20 pm

L2TP VPN Server

Mon Mar 24, 2014 9:04 pm

Hi Guys,

I have setup a L2TP VPN Server on my RB2011UAS-2HnD.

When I try to connect from a client I keep seeing the following log entries
IPSEC: 100 bytes message received from 149.254.181.216(41218) to 86.26.44.192(4500)
IPSEC: a8132521 09bd46cb 0702d321 00351100 05100201 00000000 00000064 4739d647
IPSEC: ccffe 181 41565ab 63748b0b 73573f6f a437d631 089cfa4e 39088dc1 e67b69a7
IPSEC: 80d31662 6b5b821e 40858527 7188d8c1 07e519a0 dfcd61f8 39abd01c 50a2bf4e
IPSEC: 4fd7e881
IPSEC: malformed cookie received or the spi expired.
The client fails to connect.

I have configured the VPN through WINBOX by doing the following.

IP > Pool : Added a Pool "dhcp_pool1" (192.168.88.20-192.168.88.254)
PPP > Profiles > + : Name L2TP VPN, Local Address 10.0.0.9, Remote Address dhcp_pool1, Change TCP MSS yes
PPP > Secrets > + : Name test, Password test, Service l2tp, Profile L2TP VPN
PPP > Interface > L2TP Server : Enabled, MAX MTU 1450, MAX MRU 1450, Default Profile L2TP VPN, All Authentication enabled
IPsec > Peers > + : Address 0.0.0.0/0, Port 500, Auth. Method pre shared key, Secret test, Exchange Mode main l2tp, NAT Traversal on, Proposal Check obey, Hash Algorithm sha1, Encryption 3des, DH Group modp 1024, Generate Policy port override.

Im not sure what step I have missed or gotten wrong. If anyone could provide any assistance, Id be really grateful.
 
marcus65
newbie
Posts: 26
Joined: Fri Feb 08, 2013 4:15 am
Location: Brooklyn, New York

Re: L2TP VPN Server

Wed Mar 26, 2014 7:43 pm

I'm having trouble connecting with a pptp VPN server!

Just as a trouble shooting step, can you connect without the IPSEC configuration? If you can then you've found which part of the configuration is at fault

Who is online

Users browsing this forum: No registered users and 36 guests