Issue with multiple IPv6 IPsec tunnels

RouterOS General
1

I have three IPv6 sites, let’s call them Alice, Bob and Carol.
I want them interconnected with IPv6 IPsec tunnels like this:
Alice-----Bob-----Carol
So Alice could reach Bob (and vice versa) and also Carol could reach Bob (and vice versa), but Alice couldn’t reach Carol.
My problem is that Bob is having trouble to have more then one IPv6 IPsec connection established at same time.

IPsec configs:
Alice:

/ipv6 address
add address=2002:5e70:b40::1/48 advertise=no interface=sit1
add address=2002:5e70:b40:1::1/64 interface=bridge1
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=md5 enc-algorithms=aes-128 lifetime=1m
/ip ipsec peer
add address=2002:3ef5:6740::1/128 auth-method=rsa-key enc-algorithm=aes-128 key=Alice remote-key=Bob
/ip ipsec policy
add dst-address=2002:3ef5:6740:1::/64 level=unique sa-dst-address=2002:3ef5:6740::1 sa-src-address=2002:5e70:b40::1 src-address=2002:5e70:b40:1::/64 tunnel=yes

Bob:

/ipv6 address
add address=2002:3ef5:6740::1/48 advertise=no interface=sit1
add address=2002:3ef5:6740:1::1/64 interface=bridge1
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=md5 enc-algorithms=aes-128 lifetime=1m
/ip ipsec peer
add address=2002:5e70:b40::1/128 auth-method=rsa-key enc-algorithm=aes-128 key=Bob remote-key=Alice
add address=2002:3ef5:6789::1/128 auth-method=rsa-key enc-algorithm=aes-128 key=Bob remote-key=Carol
/ip ipsec policy
add dst-address=2002:5e70:b40:1::/64 level=unique sa-dst-address=2002:5e70:b40::1 sa-src-address=2002:3ef5:6740::1 src-address=2002:3ef5:6740:1::/64 tunnel=yes
add dst-address=2002:3ef5:6789:1::/64 level=unique sa-dst-address=2002:3ef5:6789::1 sa-src-address=2002:3ef5:6740::1 src-address=2002:3ef5:6740:1::/64 tunnel=yes

Carol:

/ipv6 address
add address=2002:3ef5:6789::1/48 advertise=no interface=sit1
add address=2002:3ef5:6789:1::1/64 interface=bridge1
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=md5 enc-algorithms=aes-128 lifetime=1m
/ip ipsec peer
add address=2002:3ef5:6740::1/128 auth-method=rsa-key enc-algorithm=aes-128 key=Carol remote-key=Bob
/ip ipsec policy
add dst-address=2002:3ef5:6740:1::/64 level=unique sa-dst-address=2002:3ef5:6740::1 sa-src-address=2002:3ef5:6789::1 src-address=2002:3ef5:6789:1::/64 tunnel=yes

When Alice interconnects with Bob, their tunnel is working just fine and everything betwen them is nicely reachable and encrypted.
When Bob tries to reach Carol, Carol’s IPsec debug will end with:

21:31:13 ipsec,debug ISAKMP-SA established 2002:3ef5:6789::1[500]-2002:3ef5:6740::1[500] spi:64eda7f322f05eeb:e5589296dab7da11 
21:31:13 ipsec,debug,packet === 
21:31:13 ipsec,debug,packet ========== 
21:31:13 ipsec,debug,packet 76 bytes message received from 2002:3ef5:6740::1[500] to 2002:3ef5:6789::1[500] 
21:31:13 ipsec,debug,packet 64eda7f3 22f05eeb e5589296 dab7da11 08100501 ae7db31a 0000004c ba247155 
21:31:13 ipsec,debug,packet e8be469d 7eb8de39 c21887c4 5f79b713 c28fdea8 6719d826 52c2bf0f 6d2a7ab1 
21:31:13 ipsec,debug,packet 594e2b02 a06d445a 1ae12ae6 
21:31:13 ipsec,debug,packet receive Information. 
21:31:13 ipsec,debug,packet compute IV for phase2 
21:31:13 ipsec,debug,packet phase1 last IV: 
21:31:13 ipsec,debug,packet 99449ca1 40fe293e feb69903 0f9dd194 ae7db31a 
21:31:13 ipsec,debug,packet hash(md5) 
21:31:13 ipsec,debug,packet encryption(aes) 
21:31:13 ipsec,debug,packet phase2 IV computed: 
21:31:13 ipsec,debug,packet 937db325 861c2722 1cc91a5d 52ae5edc 
21:31:13 ipsec,debug,packet encryption(aes) 
21:31:13 ipsec,debug,packet IV was saved for next processing: 
21:31:13 ipsec,debug,packet 6d2a7ab1 594e2b02 a06d445a 1ae12ae6 
21:31:13 ipsec,debug,packet encryption(aes) 
21:31:13 ipsec,debug,packet with key: 
21:31:13 ipsec,debug,packet d09f5791 376efb26 600489ad 1b551bdb 
21:31:13 ipsec,debug,packet decrypted payload by IV: 
21:31:13 ipsec,debug,packet 937db325 861c2722 1cc91a5d 52ae5edc 
21:31:13 ipsec,debug,packet decrypted payload, but not trimed. 
21:31:13 ipsec,debug,packet fc72c9c2 5203529b b8f23dbe 49bd165e 602bf167 0000000c 00000001 01000019 
21:31:13 ipsec,debug,packet d68faf7a 7bf29a58 cb2d60b0 93d9420f 
21:31:13 ipsec,debug,packet padding len=16 
21:31:13 ipsec,debug,packet skip to trim padding. 
21:31:13 ipsec,debug,packet decrypted. 
21:31:13 ipsec,debug,packet 64eda7f3 22f05eeb e5589296 dab7da11 08100501 ae7db31a 0000004c fc72c9c2 
21:31:13 ipsec,debug,packet 5203529b b8f23dbe 49bd165e 602bf167 0000000c 00000001 01000019 d68faf7a 
21:31:13 ipsec,debug,packet 7bf29a58 cb2d60b0 93d9420f 
21:31:13 ipsec,debug ignore information because the message is too short - 76 byte(s).

But when Bob disables Alice in his /ip ipsec peers, flushes installed SAs and tries to reach Carol again, he succeeds and again, everything for him and Carol works just fine.
Now the super wierd part - when Bob has established connection with Carol and re-enables Alice in peers, he suddenly can reach everybody. Until SAs from Carol expires. After that, GOTO 10.

Other (maybe importnat) info:
All three are using 6to4 Tunnels, which, like I said above, independently works nicely.
All three are using RouterOS 5.14, Alice and Bob have RB493G, Carol has RB751G-2HnD.
I am certain that there is no problem with firewall or NAT.
I am certain that there is no problem with RSA keys or encryption used.
I have tried rebooting, reconfiguring and probably even few others re-things.

Is this behaviour some kind of bug or am I missing something obvious?

2

Today, I switched RB751 for RB433, still no luck with multiple IPv6 IPsec tunnels.

Only thing that changed from last time is IP address for Carol. Now she has 2002:542a:ee3c::1/48

When she tries to reach Bob, IPsec debug is as follows:

10:56:06 ipsec,debug suitable outbound SP found: 2002:542a:ee3c:1::/64[0] 2002:3ef5:6740:1::/64[0] proto=any dir=out
10:56:06 ipsec,debug suitable inbound SP found: 2002:3ef5:6740:1::/64[0] 2002:542a:ee3c:1::/64[0] proto=any dir=in
10:56:06 ipsec,debug new acquire 2002:542a:ee3c:1::/64[0] 2002:3ef5:6740:1::/64[0] proto=any dir=out
10:56:06 ipsec,debug,packet  (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
10:56:06 ipsec,debug,packet   (trns_id=AES encklen=128 authtype=hmac-md5)
10:56:06 ipsec,debug IPsec-SA request for 2002:3ef5:6740::1 queued due to no phase1 found.
10:56:06 ipsec,debug,packet ===
10:56:06 ipsec,debug initiate new phase 1 negotiation: 2002:542a:ee3c::1[500]<=>2002:3ef5:6740::1[500]
10:56:06 ipsec,debug begin Identity Protection mode.
10:56:06 ipsec,debug,packet new cookie:
10:56:06 ipsec,debug,packet 5a820ccc63de7087
10:56:06 ipsec,debug,packet add payload of len 56, next type 13
10:56:06 ipsec,debug,packet add payload of len 16, next type 0
10:56:06 ipsec,debug,packet 108 bytes from 2002:542a:ee3c::1[500] to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet sockname 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet from 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet src6 2002:542a:ee3c::1[500] 0
10:56:06 ipsec,debug,packet dst6 2002:3ef5:6740::1[500] 0
10:56:06 ipsec,debug,packet 1 times of 108 bytes message will be sent to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 00000000 00000000 01100200 00000000 0000006c 0d00003c
10:56:06 ipsec,debug,packet 00000001 00000001 00000030 01010001 00000028 01010000 800b0001 000c0004
10:56:06 ipsec,debug,packet 00015180 80010007 800e0080 80030003 80020001 80040002 00000014 afcad713
10:56:06 ipsec,debug,packet 68a1f1c9 6b8696fc 77570100
10:56:06 ipsec,debug,packet resend phase1 packet 5a820ccc63de7087:0000000000000000
10:56:06 ipsec,debug,packet ==========
10:56:06 ipsec,debug,packet 108 bytes message received from 2002:3ef5:6740::1[500] to 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 01100200 00000000 0000006c 0d00003c
10:56:06 ipsec,debug,packet 00000001 00000001 00000030 01010001 00000028 01010000 800b0001 000c0004
10:56:06 ipsec,debug,packet 00015180 80010007 800e0080 80030003 80020001 80040002 00000014 afcad713
10:56:06 ipsec,debug,packet 68a1f1c9 6b8696fc 77570100
10:56:06 ipsec,debug,packet begin.
10:56:06 ipsec,debug,packet seen nptype=1(sa)
10:56:06 ipsec,debug,packet seen nptype=13(vid)
10:56:06 ipsec,debug,packet succeed.
10:56:06 ipsec,debug received Vendor ID: DPD
10:56:06 ipsec,debug,packet total SA len=56
10:56:06 ipsec,debug,packet 00000001 00000001 00000030 01010001 00000028 01010000 800b0001 000c0004
10:56:06 ipsec,debug,packet 00015180 80010007 800e0080 80030003 80020001 80040002
10:56:06 ipsec,debug,packet begin.
10:56:06 ipsec,debug,packet seen nptype=2(prop)
10:56:06 ipsec,debug,packet succeed.
10:56:06 ipsec,debug,packet proposal #1 len=48
10:56:06 ipsec,debug,packet begin.
10:56:06 ipsec,debug,packet seen nptype=3(trns)
10:56:06 ipsec,debug,packet succeed.
10:56:06 ipsec,debug,packet transform #1 len=40
10:56:06 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
10:56:06 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
10:56:06 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=128
10:56:06 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=RSA signatures
10:56:06 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=MD5
10:56:06 ipsec,debug,packet hash(md5)
10:56:06 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=1024-bit MODP group
10:56:06 ipsec,debug,packet hmac(modp1024)
10:56:06 ipsec,debug,packet pair 1:
10:56:06 ipsec,debug,packet  0x4915d0: next=(nil) tnext=(nil)
10:56:06 ipsec,debug,packet proposal #1: 1 transform
10:56:06 ipsec,debug,packet prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
10:56:06 ipsec,debug,packet trns#=1, trns-id=IKE
10:56:06 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
10:56:06 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
10:56:06 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
10:56:06 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=128
10:56:06 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=RSA signatures
10:56:06 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=MD5
10:56:06 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=1024-bit MODP group
10:56:06 ipsec,debug,packet Compared: DB:Peer
10:56:06 ipsec,debug,packet (lifetime = 86400:86400)
10:56:06 ipsec,debug,packet (lifebyte = 0:0)
10:56:06 ipsec,debug,packet enctype = AES-CBC:AES-CBC
10:56:06 ipsec,debug,packet (encklen = 128:128)
10:56:06 ipsec,debug,packet hashtype = MD5:MD5
10:56:06 ipsec,debug,packet authmethod = RSA signatures:RSA signatures
10:56:06 ipsec,debug,packet dh_group = 1024-bit MODP group:1024-bit MODP group
10:56:06 ipsec,debug,packet an acceptable proposal found.
10:56:06 ipsec,debug,packet hmac(modp1024)
10:56:06 ipsec,debug,packet agreed on RSA signatures auth.
10:56:06 ipsec,debug,packet ===
10:56:06 ipsec,debug,packet compute DH's private.
10:56:06 ipsec,debug,packet 6f730e5a 1219eb16 17ef9ab0 170a8ce2 d38e1f74 21eb8b81 eb27f45e 7f7351c9
10:56:06 ipsec,debug,packet 724d76b4 a6dd40d1 7d807d2b a050cc96 ac977fdf ee49797e 92940894 45a756fe
10:56:06 ipsec,debug,packet 29603db9 55257ec8 b9988f63 cf02965c c242d724 1bded6ed ccc74ea8 c93d229b
10:56:06 ipsec,debug,packet 312ba1dd 1590dd4a c91e17f9 7d9b4121 8616d8b1 b6cfd64b 3367b333 860a222e
10:56:06 ipsec,debug,packet compute DH's public.
10:56:06 ipsec,debug,packet 2673a49d da9e2f40 2e49ad68 ccaccb81 92b9e94b cfd12824 26056877 61c676db
10:56:06 ipsec,debug,packet 86d9be9c 9f41dda2 00d141a9 87ec44ff 9e05defd b7ceb090 35fbc079 cfa487c6
10:56:06 ipsec,debug,packet 51196ba5 54286f08 20a46e96 88c260cb 27bc6693 30103cd4 49937107 88f94684
10:56:06 ipsec,debug,packet 47e73d93 4231203f 39a3c9fe c07f5b3d 699ec333 70003189 c59fa3e7 a2d0ad59
10:56:06 ipsec,debug,packet add payload of len 128, next type 10
10:56:06 ipsec,debug,packet add payload of len 24, next type 0
10:56:06 ipsec,debug,packet 188 bytes from 2002:542a:ee3c::1[500] to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet sockname 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet from 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet src6 2002:542a:ee3c::1[500] 0
10:56:06 ipsec,debug,packet dst6 2002:3ef5:6740::1[500] 0
10:56:06 ipsec,debug,packet 1 times of 188 bytes message will be sent to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 04100200 00000000 000000bc 0a000084
10:56:06 ipsec,debug,packet 2673a49d da9e2f40 2e49ad68 ccaccb81 92b9e94b cfd12824 26056877 61c676db
10:56:06 ipsec,debug,packet 86d9be9c 9f41dda2 00d141a9 87ec44ff 9e05defd b7ceb090 35fbc079 cfa487c6
10:56:06 ipsec,debug,packet 51196ba5 54286f08 20a46e96 88c260cb 27bc6693 30103cd4 49937107 88f94684
10:56:06 ipsec,debug,packet 47e73d93 4231203f 39a3c9fe c07f5b3d 699ec333 70003189 c59fa3e7 a2d0ad59
10:56:06 ipsec,debug,packet 0000001c dfafcddb 2795c769 c1cacd87 ab3e9818 5fed32c7 a016fbef
10:56:06 ipsec,debug,packet resend phase1 packet 5a820ccc63de7087:50d59dc6d7aea435
10:56:06 ipsec,debug,packet ==========
10:56:06 ipsec,debug,packet 188 bytes message received from 2002:3ef5:6740::1[500] to 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 04100200 00000000 000000bc 0a000084
10:56:06 ipsec,debug,packet c206f946 9e06f486 59a1015c 860009fe 95640a73 65019fb6 394dd0d9 a04b72f6
10:56:06 ipsec,debug,packet 83ee8d1c c27d45c5 e0a770b0 de56196f b6408804 e70c419f d5dec59c 996f94d2
10:56:06 ipsec,debug,packet d9dceca8 2f349abd b937651d d59aedbe bef8e3bd 231855da 70bf3c38 a0dfcb0a
10:56:06 ipsec,debug,packet daa7ff74 9cf76593 6d085fba 64f2fbf4 1e05656a 20af8cb1 5335a238 1cadde50
10:56:06 ipsec,debug,packet 0000001c dc535e8f ba7b74b0 61422c47 74dc1c94 1d6f1001 199fb150
10:56:06 ipsec,debug,packet begin.
10:56:06 ipsec,debug,packet seen nptype=4(ke)
10:56:06 ipsec,debug,packet seen nptype=10(nonce)
10:56:06 ipsec,debug,packet succeed.
10:56:06 ipsec,debug,packet ===
10:56:06 ipsec,debug,packet compute DH's shared.
10:56:06 ipsec,debug,packet
10:56:06 ipsec,debug,packet 9a443a7c f7bc7d5f 3e9e6f2d 7a1cacd7 5eff6d6c b8cf5822 1feb033b de8fa745
10:56:06 ipsec,debug,packet 537ef91f 1143a713 7e54e137 68dc566d 0bc07091 750c6361 6b74051c 3620df67
10:56:06 ipsec,debug,packet b5e7145e cd1d2d8c cf5f9658 271eee78 bccbf988 a8cb025f 3cd767c1 6e538d69
10:56:06 ipsec,debug,packet 5e0e080f 39c9d8fa 06d8bc4e 6c6a98e7 c4c897f1 f786dbc2 8e92937b df197f1e
10:56:06 ipsec,debug,packet nonce1:
10:56:06 ipsec,debug,packet dfafcddb 2795c769 c1cacd87 ab3e9818 5fed32c7 a016fbef
10:56:06 ipsec,debug,packet nonce2:
10:56:06 ipsec,debug,packet dc535e8f ba7b74b0 61422c47 74dc1c94 1d6f1001 199fb150
10:56:06 ipsec,debug,packet hmac(hmac_md5)
10:56:06 ipsec,debug,packet SKEYID computed:
10:56:06 ipsec,debug,packet 15057e3b d8f3a5f6 9e97f305 a02b0d25
10:56:06 ipsec,debug,packet hmac(hmac_md5)
10:56:06 ipsec,debug,packet SKEYID_d computed:
10:56:06 ipsec,debug,packet 6e6bded0 deaf25f3 ac3756d7 6d482083
10:56:06 ipsec,debug,packet hmac(hmac_md5)
10:56:06 ipsec,debug,packet SKEYID_a computed:
10:56:06 ipsec,debug,packet a1497fc2 3b8d6653 d56677f6 60d5eedc
10:56:06 ipsec,debug,packet hmac(hmac_md5)
10:56:06 ipsec,debug,packet SKEYID_e computed:
10:56:06 ipsec,debug,packet 5a9b40a0 82b030dc d14bc980 acefa0db
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet hash(md5)
10:56:06 ipsec,debug,packet final encryption key computed:
10:56:06 ipsec,debug,packet 5a9b40a0 82b030dc d14bc980 acefa0db
10:56:06 ipsec,debug,packet hash(md5)
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet IV computed:
10:56:06 ipsec,debug,packet 00971a7f dbb0833b 32810b5c c9ea3cf9
10:56:06 ipsec,debug,packet use ID type of IPv6_address
10:56:06 ipsec,debug,packet HASH with:
10:56:06 ipsec,debug,packet 2673a49d da9e2f40 2e49ad68 ccaccb81 92b9e94b cfd12824 26056877 61c676db
10:56:06 ipsec,debug,packet 86d9be9c 9f41dda2 00d141a9 87ec44ff 9e05defd b7ceb090 35fbc079 cfa487c6
10:56:06 ipsec,debug,packet 51196ba5 54286f08 20a46e96 88c260cb 27bc6693 30103cd4 49937107 88f94684
10:56:06 ipsec,debug,packet 47e73d93 4231203f 39a3c9fe c07f5b3d 699ec333 70003189 c59fa3e7 a2d0ad59
10:56:06 ipsec,debug,packet c206f946 9e06f486 59a1015c 860009fe 95640a73 65019fb6 394dd0d9 a04b72f6
10:56:06 ipsec,debug,packet 83ee8d1c c27d45c5 e0a770b0 de56196f b6408804 e70c419f d5dec59c 996f94d2
10:56:06 ipsec,debug,packet d9dceca8 2f349abd b937651d d59aedbe bef8e3bd 231855da 70bf3c38 a0dfcb0a
10:56:06 ipsec,debug,packet daa7ff74 9cf76593 6d085fba 64f2fbf4 1e05656a 20af8cb1 5335a238 1cadde50
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 00000001 00000001 00000030 01010001
10:56:06 ipsec,debug,packet 00000028 01010000 800b0001 000c0004 00015180 80010007 800e0080 80030003
10:56:06 ipsec,debug,packet 80020001 80040002 051101f4 2002542a ee3c0000 00000000 00000001
10:56:06 ipsec,debug,packet hmac(hmac_md5)
10:56:06 ipsec,debug,packet HASH computed:
10:56:06 ipsec,debug,packet d5366bc5 d2908e12 864b7ec4 af9ab683
10:56:06 ipsec,debug,packet SIGN computed:
10:56:06 ipsec,debug,packet 5efe62de 7f0c0ac3 ce55e044 f47037d7 e4336984 38833256 6090c869 2eec01e7
10:56:06 ipsec,debug,packet 0559c1a0 30f08199 55cd6357 283c0549 7178d257 ec82e6fe 4f33c5b9 3536b02e
10:56:06 ipsec,debug,packet 96aff5ba 3987d218 6d75d87c 3791b87a f9e3bf8b ddcef0cb 2e5fb818 4f9155c9
10:56:06 ipsec,debug,packet caf3f0df 77f4dbc7 ad7be128 7deda555 4b0a3aca 4086353d db040629 e63652a3
10:56:06 ipsec,debug,packet add payload of len 20, next type 9
10:56:06 ipsec,debug,packet add payload of len 128, next type 0
10:56:06 ipsec,debug,packet begin encryption.
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet pad length = 4
10:56:06 ipsec,debug,packet 09000018 051101f4 2002542a ee3c0000 00000000 00000001 00000084 5efe62de
10:56:06 ipsec,debug,packet 7f0c0ac3 ce55e044 f47037d7 e4336984 38833256 6090c869 2eec01e7 0559c1a0
10:56:06 ipsec,debug,packet 30f08199 55cd6357 283c0549 7178d257 ec82e6fe 4f33c5b9 3536b02e 96aff5ba
10:56:06 ipsec,debug,packet 3987d218 6d75d87c 3791b87a f9e3bf8b ddcef0cb 2e5fb818 4f9155c9 caf3f0df
10:56:06 ipsec,debug,packet 77f4dbc7 ad7be128 7deda555 4b0a3aca 4086353d db040629 e63652a3 f2fc4f03
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet with key:
10:56:06 ipsec,debug,packet 5a9b40a0 82b030dc d14bc980 acefa0db
10:56:06 ipsec,debug,packet encrypted payload by IV:
10:56:06 ipsec,debug,packet 00971a7f dbb0833b 32810b5c c9ea3cf9
10:56:06 ipsec,debug,packet save IV for next:
10:56:06 ipsec,debug,packet 9ba0fc48 28f5fa59 4f903b80 68652d5a
10:56:06 ipsec,debug,packet encrypted.
10:56:06 ipsec,debug,packet 188 bytes from 2002:542a:ee3c::1[500] to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet sockname 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet from 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet send packet to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet src6 2002:542a:ee3c::1[500] 0
10:56:06 ipsec,debug,packet dst6 2002:3ef5:6740::1[500] 0
10:56:06 ipsec,debug,packet 1 times of 188 bytes message will be sent to 2002:3ef5:6740::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 05100201 00000000 000000bc 8dadd2a9
10:56:06 ipsec,debug,packet 16d86520 139bf306 b19c05c0 dfeb57b3 c9048ced 9f8141fd 4e2cb42d 1751a0c0
10:56:06 ipsec,debug,packet d0ed49e0 7269434e 8e5b116d e45eafef 68225e7a 32250085 3997e49e bf038657
10:56:06 ipsec,debug,packet 5d951e15 ab2ca8a5 b89060e7 0b8e6da0 39f53df6 0ba42fef 7ff56b82 4efde0d2
10:56:06 ipsec,debug,packet c37c752b f0a05775 2dcc01d8 10bdaa4a 31bd81b3 beefe8f6 2973a0af 82794ddc
10:56:06 ipsec,debug,packet 34c59d2a 3568f3e1 71d45c01 9ba0fc48 28f5fa59 4f903b80 68652d5a
10:56:06 ipsec,debug,packet resend phase1 packet 5a820ccc63de7087:50d59dc6d7aea435
10:56:06 ipsec,debug,packet ==========
10:56:06 ipsec,debug,packet 76 bytes message received from 2002:3ef5:6740::1[500] to 2002:542a:ee3c::1[500]
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 08100501 a04aa22f 0000004c 8399b9a0
10:56:06 ipsec,debug,packet 8348bbd4 1d7b7b01 4191a748 b6ab8eed 29d50365 4a20bfaa 51ce9856 62009e07
10:56:06 ipsec,debug,packet a78ae87e e8ff4903 4d7c7562
10:56:06 ipsec,debug,packet receive Information.
10:56:06 ipsec,debug,packet compute IV for phase2
10:56:06 ipsec,debug,packet phase1 last IV:
10:56:06 ipsec,debug,packet 9ba0fc48 28f5fa59 4f903b80 68652d5a a04aa22f
10:56:06 ipsec,debug,packet hash(md5)
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet phase2 IV computed:
10:56:06 ipsec,debug,packet 5aa95fcd 3ac84546 3d0e45bf e075ee51
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet IV was saved for next processing:
10:56:06 ipsec,debug,packet 62009e07 a78ae87e e8ff4903 4d7c7562
10:56:06 ipsec,debug,packet encryption(aes)
10:56:06 ipsec,debug,packet with key:
10:56:06 ipsec,debug,packet 5a9b40a0 82b030dc d14bc980 acefa0db
10:56:06 ipsec,debug,packet decrypted payload by IV:
10:56:06 ipsec,debug,packet 5aa95fcd 3ac84546 3d0e45bf e075ee51
10:56:06 ipsec,debug,packet decrypted payload, but not trimed.
10:56:06 ipsec,debug,packet fbfcca35 f936bcc9 548339ab 70c7cb48 eb59e435 0000000c 00000001 01000019
10:56:06 ipsec,debug,packet 624e4809 6333c943 11ff331b 3ad4990f
10:56:06 ipsec,debug,packet padding len=16
10:56:06 ipsec,debug,packet skip to trim padding.
10:56:06 ipsec,debug,packet decrypted.
10:56:06 ipsec,debug,packet 5a820ccc 63de7087 50d59dc6 d7aea435 08100501 a04aa22f 0000004c fbfcca35
10:56:06 ipsec,debug,packet f936bcc9 548339ab 70c7cb48 eb59e435 0000000c 00000001 01000019 624e4809
10:56:06 ipsec,debug,packet 6333c943 11ff331b 3ad4990f
10:56:06 ipsec,debug ignore information because ISAKMP-SA has not been established yet.

Moreover, I’m not quite satisfied with seeing 0.0.0.0 as both source and destination address in installed SAs. I know that it’s only cosmetic detail, but still.. if ROS claims that it supports IPv6 IPsec, why not do it properly?

Btw. is there any prober public bug reporting tool or are 'Tik guys too sexy for it, so they only provide support for paying customers?

3

If you find any bugs you can report them to support.

4

Hi, Disassembler

I tried rsa key IPv6 IPSec between Mikrotik 2, but does not work. The same configuration with pre shared key works fine. Please help me, where I’m wrong?