Hello,
i want to connect a IPSEC Tunnel between Mikrotik and a Sophos Firewall:
I can ping the local Interface from a Managment Server behind the Sophos, but not connect on SSH or Winbox to the Mikrotik with the Managment Server Win2k8 R2 behind the Sophos Firewall.
Does anyone have an idea?
Network:
Mikrotik Configuration:
Version: 6.18
Firewall NAT:
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=accept src-address=192.168.13.0/24 dst-address=192.168.10.0/24
1 chain=srcnat action=masquerade out-interface=ether1
IPSEC Tunnel:
/ip ipsec> peer print
Flags: X - disabled, D - dynamic
0 address=86.*.*.10/32 local-address=0.0.0.0 passive=no port=500 auth-method=pre-shared-key secret="here is the key" generate-policy=port-override exchange-mode=main send-initial-contact=yes nat-traversal=no proposal-check=obey hash-algorithm=md5
enc-algorithm=aes-256 dh-group=modp1536 lifetime=1d lifebytes=0 dpd-interval=2m dpd-maximum-failures=5
/ip ipsec> remote-peers print
0 local-address=213.*.*.141 remote-address=86.*.*.10 state=established side=initiator established=32m44s
Sophos Firewall says no connection, but there is no error in the Live Log:
Log from Sophos:
2014:08:08-13:45:45 fw01 pluto[10460]: "S_VPN Home" #44: responding to Main Mode
2014:08:08-13:45:45 fw01 pluto[10460]: "S_VPN Home" #44: Peer ID is ID_IPV4_ADDR: '213.*.*.141'
2014:08:08-13:45:45 fw01 pluto[10460]: "S_VPN Home" #44: Dead Peer Detection (RFC 3706) enabled
2014:08:08-13:45:45 fw01 pluto[10460]: "S_VPN Home" #44: sent MR3, ISAKMP SA established
If you need more information from the logs, please feel free to ask. Thank you for your help.