Can't configure routeros as xauth responder

RouterOS General
1

Hi. I’m trying to set up xauth responder for roadwarriors client at ROS 6.1 L5 on RB450G:

ip ipsec peer add address=0.0.0.0/0 passive=yes auth-method=pre-shared-key-xauth secret="mysecret" dh-group=modp1024 exchange-mode=main enc-algorithm=aes-256 hash-algorithm=sha1 generate-policy=port-strict lifetime=60m mode-cfg=rw-pool send-initial-contact=yes nat-traversal=yes proposal-check=obey policy-group=rw_policies

Although passive=yes specified, answer is

failure: Xauth login and password must be set for initiator!

Where I’ve got wrong?

2

currently set send-initial-contact=no

we will fix it in next version

3

Thanks, got it.

4

Hello,

I have been trying to find a solution to authenticate an IPHONE using IPSEC. I am using a Mikrotik RB493G with OS 6.0 , upgraded that to 6.1 still unable to see it work.
On WINBOX I cannot see the auth-method=pre-shared-key-xauth , when i set that from terminal it accepts it however it is marked in blue on the WINBOX (as if there is not option as such)
Furthermore I cannot see the group name in group policy nor the group name on winbox as well as no users for ipsec are shown.
I followed the wiki link : http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_with_Mode_Conf
No success.
My PPTP is working fine but my client is insisting on IPSEC.

Can someone help ?