root@OpenWrt:/# poweroff
root@OpenWrt:/# br-lan: port 1(eth0) entering disabled state
device eth0 left promiscuous mode
br-lan: port 1(eth0) entering disabled state
System halted.
Write failed: Broken pipe
Please can IPSec VTI be considered for RouterOS v7? The Linux kernel has had support since 2012: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=1181412c1a671ed4e8fb1736f17e6ec617c68059 I know the same can be done manually with IPSec+GRE but it is a huge deal with larger in...
I have also hit this problem on an RB2011 running L2TP/IPSec VPN server as described here: http://forum.mikrotik.com/viewtopic.php?f=14&t=78107 I obtained this info via the serial console, all other networking is unavailable: uptime: 2d20h16m version: 6.10 cache-size: 16384 max-cache-size: 16384...
I am hitting this bug too, running RouterOS 6.10. I have three RB2011s with similar configs, however the problematic one is running an L2TP/IPSec VPN and the other two are not. I obtained this info via the serial console, all other networking is unavailable: uptime: 2d20h16m version: 6.10 cache-size...
The solution is to allow "No encryption" from the Encryption tab of the IAS policy. The thing that caught me out though is you have to restart the service for the change to take effect.
Hi, I am using L2TP/IPSec successfully for users defined locally: /interface l2tp-server server set authentication=mschap2 default-profile=default-encryption enabled=yes /ppp secret add name=testuser password=removed profile=default-encryption service=l2tp This works without any problems. However us...
Hi guys, I am wondering if IPSec LZS compression is supported or in the works? I couldn't find any reference to it in the documentation (v5.18). We are retiring a bunch of SnapGear SG300 firewalls and replacing them with MikroTik devices, this is the only thing we are having to disable to make IPSec...