IPsec between 2.9.8 and 2.9.10?

RouterOS General
1

Are there any known issues between Version 2.9.8 and 2.9.10 with IPsec?
When I try to connect two boxes with these versions through IPsec I could only manage it when using aggressive mode in phase 1. Main mode does not work!

With the version 2.9.10 i was also not able to connect to a m0n0wall (http://www.m0n0.ch/wall/) box through IPsec. Doesn’t matter what options I tried.

I’ve downgraded one box to 2.9.8 and now i can connect the two MT’s with each other (both modes: main (with a little delay when the first connection is made) and aggressiv).

Could anyone confirm?

2

Yes, problem with IPSec was confirmed by Mikrotik support, will be fixed in next version.

3

I have to setup two MTs as an Watchguard Firebox replacement next week at my customer. I have to setup an IPsec Tunnel between these boxes and would love it to use main mode.

Could you give me an hint which older version runs fine in main mode? Even 2.9.8 (only MTs are in the game) sometimes not establish a tunnel or it takes a long time.

But nevertheless im very happy to change from Watchguard to MTs! :smiley: