I’m build a IPSEC-VPN between a Mikrotic 2011UAS-2Hnd on left side and Linux opensuse with strongswan (lasted version) on the other side.
I’m getting a establish connection on the both sides but only on Linux I’m getting the SA installed.
Linux ipsec statusall
Connections:
mtz-xxx: xx.xx.xx.xx…xx.xx.xx.xx IKEv1/2
mtz-xxx: local: [xx.xx.xx.xx] uses pre-shared key authentication
mtz-xxx: remote: uses pre-shared key authentication
mtz-xxx: child: 192.168.254.240/32 === 192.168.1.192/32 TUNNEL
Routed Connections:
mtz-xxx{1}: ROUTED, TUNNEL, reqid 1
mtz-xxx{1}: 192.168.254.240/32 === 192.168.1.192/32
Security Associations (1 up, 0 connecting):
mtz-xxx[2]: ESTABLISHED 21 minutes ago, xx.xx.xx.xx[xx.xx.xx.xx]…xx.xx.xx.xx[192.168.25.5]
mtz-xxx[2]: IKEv1 SPIs: xx.xx.xx.xx, pre-shared key reauthentication in 33 minutes
mtz-xxx[2]: IKE proposal: AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024
Mikrotik:
/ip ipsec remote-peers> print
0 local-address=192.168.25.5 port=4500 remote-address=xx.xx.xx.xx port=4500
state=established side=responder established=29m20s
The ping or any other protocol don’t Works.
Could anybody help me?
Best Regards,
André João Telöcken.