RB1100AHx2 on 3 sites all running v6.37
I’ve set everything up and in the logging of ipsec I get:
phase1 negotiation failed due to time up localwan<500><=>remotewan[500] with a hexidecimal address after
In the interface logging I see:
Sebring GRE transmit loop detected, downing interface for 60 seconds
I have the filter rules to accept GRE and IPSEC-ESP on input. I’m not sure what I’m missing here. Any help?
Probably local and remote addresses of the tunnel entered incorrectly.
First can also be caused by incorrect secret.
/ip ipsec peer
add address=IPADDRESS1/32 auth-method=pre-shared-key dh-group=modp1024 disabled=no dpd-interval=2m dpd-maximum-failures=5 enc-algorithm=aes-128,3des exchange-mode=main generate-policy=no hash-algorithm=sha1 \
lifebytes=0 lifetime=1d local-address=:: nat-traversal=no passive=no policy-template-group=default port=500 proposal-check=obey secret=test send-initial-contact=yes
/ip ipsec peer
add address=IPADDRESS2/32 auth-method=pre-shared-key dh-group=modp1024 disabled=no dpd-interval=2m dpd-maximum-failures=5 enc-algorithm=aes-128,3des exchange-mode=main generate-policy=no hash-algorithm=sha1 \
lifebytes=0 lifetime=1d local-address=:: nat-traversal=no passive=no policy-template-group=default port=500 proposal-check=obey secret=test send-initial-contact=yes