IPSec to Cisco VPN

RouterOS Beginner Basics
1

Essentially trying to setup an VPN to transport some VoIP traffic from one side of the gateway to the other (VoIP server being on one side, VoIP equipment on the other at remote site).

I have a setup here for the mikrotik, but when running the Cisco is seeing the following in the logs;
System 2013-05-10 16:53:08 device1 (12470) pending Quick Mode with 59.167.x.x “VoIPSitetoSite” took too long – replacing phase 1

Any idea what it is? I have re-checked the password, authentication methods etc and everything I can tell is the same as the cisco..

Thanks in advance!


[Gateway] /ip ipsec> export verbose

/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha1 disabled=no enc-algorithms=
aes-128 lifetime=30m name=default pfs-group=modp1536
/ip ipsec peer
add address=27.50.x.18/32 auth-method=pre-shared-key dh-group=modp1536
disabled=no dpd-interval=disable-dpd dpd-maximum-failures=1
enc-algorithm=aes-128 exchange-mode=main generate-policy=no
hash-algorithm=md5 lifebytes=0 lifetime=1d my-id-user-fqdn=“”
nat-traversal=no port=500 proposal-check=obey secret=“R5qUbMqmdb$%”
send-initial-contact=yes
/ip ipsec policy
add action=encrypt disabled=no dst-address=27.50.x.0/29 dst-port=any
ipsec-protocols=esp level=require priority=0 proposal=default protocol=
all sa-dst-address=27.50.x.18 sa-src-address=59.167.x.x src-address=
10.75.0.0/24 src-port=any tunnel=yes

2

I’m sad that better response on Reddit then on the Mikrotik support forums :frowning:


was able to work out the initial phase, but mostly what is hampering me is a complete lack of logs!
Honestly, what use is this?
ipsec,warning,critical ::ffff:0.0.0.0 address relase to pool failed: ERROR_BROKEN: Used has no usedaddr entry (6)

Because it’s the same if it fails on phase 1 of phase 2.

3

The other relevant areas are your firewall settings and the Cisco config. Try uploading those - easier to comment on a fuller picture.