Community discussions

MikroTik App
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

L2TP-IPSec issues

Thu Aug 09, 2018 9:15 am

i'm trying to establish L2TP tunnel.
Issues become when accessing by iPhone
MT to MT works great.

I haven't tested it by android i'll try today
You do not have the required permissions to view the files attached to this post.
 
Cvan
Member Candidate
Member Candidate
Posts: 129
Joined: Sat Jun 09, 2018 3:32 am

Re: L2TP-IPSec issues

Thu Aug 09, 2018 9:23 am

User port strict and obey under Peers
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: L2TP-IPSec issues

Thu Aug 09, 2018 9:32 am

yes it is
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: L2TP-IPSec issues

Thu Aug 09, 2018 9:51 am

i add sha1 in proposal,now it works.
Any explanation why it goes like that will be great
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11280
Joined: Mon Dec 04, 2017 9:19 pm

Re: L2TP-IPSec issues

Thu Aug 09, 2018 10:25 am

Because different clients use different proposals on their end and if the proposals of the peers don't match in at least one algorithm for each purpose (authentication, encryption, initial key exchange, PFS), the connection cannot be established. So nothing on the list of auth-algorithms of your peer serving the L2TP/IPsec purpose was supported by the iPhone, while sha1 is.
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: L2TP-IPSec issues

Thu Aug 09, 2018 10:30 am

Because different clients use different proposals on their end and if the proposals of the peers don't match in at least one algorithm for each purpose (authentication, encryption, initial key exchange, PFS), the connection cannot be established. So nothing on the list of auth-algorithms of your peer serving the L2TP/IPsec purpose was supported by the iPhone, while sha1 is.
Thanks Sindy

Just one thing i know that i don't need to play on peer more the one 0.0.0.0/0.
So what about one 0.0.0.0/0 and other particular address. So it means can i play with L2TP-Server and L2TP-Client.
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1397
Joined: Tue Jun 23, 2015 2:35 pm

Re: L2TP-IPSec issues

Thu Aug 09, 2018 10:47 am

yeee i found.

MTZ say Yes, it is possible to configure pptp client/server, l2tp client/server at the same time