Community discussions

MikroTik App
 
estebanuy
just joined
Topic Author
Posts: 3
Joined: Tue Oct 03, 2017 6:16 pm

IPsec in version OS 6.38.7

Mon Oct 09, 2017 3:01 pm

i have an issue with the ipsec, routerOS 6.37.5:

these are the configurations:


/ip ipsec policy
add action=none dst-address=10.10.0.0/24 level=use sa-dst-address=10.200.80.89 sa-src-address=10.181.9.97 \
src-address=0.0.0.0/0 tunnel=yes
add dst-address=192.168.200.0/24 proposal=lose-256 sa-dst-address=10.200.80.90 sa-src-address=0.0.0.0 \
src-address=10.10.0.0/24 tunnel=yes
add dst-address=0.0.0.0/0 sa-dst-address=10.200.80.89 sa-src-address=10.181.9.97 src-address=10.10.0.0/24 \
tunnel=yes

/ip ipsec peer
add address=10.200.80.89/32 auth-method=rsa-signature certificate=subag_10_10.cer_0 dpd-interval=5s \
exchange-mode=aggressive remote-certificate=none
add address=10.200.80.90/32 auth-method=rsa-signature certificate=subag_10_10.cer_0 dh-group=modp1536 \
dpd-interval=5s enc-algorithm=aes-256 remote-certificate=none


/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des lifetime=2h pfs-group=none
add enc-algorithms=aes-256-cbc lifetime=2h name=lose-256 pfs-group=none


when i try to update from 6.37.5 to 6.38.7 the ipsec doesn't work and change a few parameters.
I tested various configurations but when restart the router this erase it (in version OS 6.38.7)

thanks in advance if you can help me.