Community discussions

MikroTik App
 
dairojim
just joined
Topic Author
Posts: 3
Joined: Wed May 14, 2008 11:47 pm

Problem IPSEC tunnel

Fri Jul 31, 2009 4:43 pm

I'm trying to establish an IPSEC tunnel between two computers Mikrotik, but I always get a message No Phase2.

This is my configuration
Mikrotik 1

ip ipsec policy print
src-address=192.168.0.0/24:any dst-address=192.168.1.0/24:any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address=200.21.106.105 sa-dst-address=200.21.106.113 proposal=default manual-sa=none dont-fragment=clear

ip ipsec peer print
address=200.21.106.113/32:500 secret="**********" generaty-policy=yes exchange-mode=main send-initial-contact=yes proposal-check=obey hash-algorithm=sha1 enc-algorithm=3des dh-group=modp1024 lifetime=1d lifebytes=0

ip ipsec proposal print
name="default" auth-algorithms=sha1 enc-algorithms=3des lifetime=1h lifebytes=0 pfs-group=none

Mikrotik 2

ip ipsec policy print
src-address=192.168.1.0/24:any dst-address=192.168.0.0/24:any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address=200.21.106.113 sa-dst-address=200.21.106.105 proposal=default manual-sa=none dont-fragment=clear

ip ipsec peer print
address=200.21.106.105/32:500 secret ="**********" generaty-policy=yes exchange-mode=main send-initial-contact=yes proposal-check=obey hash-algorithm=sha1 enc-algorithm=3des dh-group=modp1024 lifetime=1d lifebytes=0

ip ipsec proposal print
name="default" auth-algorithms=sha1 enc-algorithms=3des lifetime=1h lifebytes=0 pfs-group=none

Please. I do not know that I'm doing wrong, I use the examples in

http://www.mikrotik.com/testdocs/ros/2.9/ip/ipsec.php

but I always get a message No Phase2

Thank's

Who is online

Users browsing this forum: seriosha and 43 guests