Hello all,

I am trying to set up ipsec between two mikrotik rb450Gs. I added the peers and the policies. After doing so, when I try to ping each other it shows "ipsec phase2 negotiation failed due to time up waiting for phase1" on the log. Also, I used a hub b/n them and tried to capture with wireshark. It seems like the the requester is sending encrypted message, but there is no reply from the remote peer. And packets where being rejected. In the policies I set the src-address and sa-src-address the same. Should that be changed?

sgizaw

Thanks,

Configuration example, use the one which is most suitable for your situation,
http://wiki.mikrotik.com/wiki/IPsec#App ... n_Examples