I have problem with my IKEv2 on MT 6.46.7 because it is disconnected after 8 minutes.
My configuration is:
Code: Select all
ip ipsec profile add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=vpn_profile
ip ipsec peer add exchange-mode=ike2 local-address=public_ip name=vpn_peer passive=yes profile=vpn_profile send-initial-contact=no
ip ipsec proposal add auth-algorithms=sha256 enc-algorithms=aes-256-cbc lifetime=8h name=vpn_proposal pfs-group=none
ip pool add name=vpn_pool ranges=192.168.0.2-192.168.0.10
ip ipsec mode-config add address-pool=vpn_pool address-prefix-length=32 name=vpn_config split-include=0.0.0.0/0 static-dns=8.8.8.8 system-dns=no
ip ipsec identity add auth-method=digital-signature certificate=router generate-policy=port-strict match-by=certificate mode-config=vpn_config peer=vpn_peer remote-certificate=user1 remote-id=fqdn:user1@domain.com
ip ipsec policy set proposal=vpn_proposal template=yes action=encrypt ipsec-protocols=esp
Who can help me? Thanks in advance.
Mike