IPSec between MT and WinXP

I need create L2TP/IPSec tunel between WinXP and MT. I have functionally L2TP server on MT. I need IPSec on MT.

Please help me with configuring IPSec on MT with pre-shared password on WinXP client.

I don’t want disable IPSec. I need it.

Thank’s

Add the preshared key to /ip ipsec peer section and set ‘generate-policy=yes’ for this record. There is no additional configuration needed.

Eugene

In log I found this message:
“received ISAKMP packet from x.x.x.x, phase 1, Identity protection”
“peer not configured”

Whats is wrong?

Thanks.

No proper ‘/ip ipsec peer’ section.

Eugene

In particular make sure that you have

address=0.0.0.0/0:500

and not

address=0.0.0.0/32:500

in your peer definition.

Also make sure that you have exchange-mode=main and, of course, generate-policy=yes as has been mentioned before.