Hi,
I want to set up a MikroTek RouterBoard lite as a L2TP client. As L2TP server I have set up a Unify Security Gateway in a remote network that I can successfully connect to from my PC.
But with the MikroTek I can’t establish a connection.
I have configured the MikroTek in the following way:
[admin@MikroTik] /interface l2tp-client> print
Flags: X - disabled, R - running
0 name="l2tp-out1" max-mtu=1400 max-mru=1400 mrru=disabled connect-to=***.com
user="***" password="***" profile=default-encryption keepalive-timeout=disabled
use-ipsec=yes ipsec-secret="***" allow-fast-path=no add-default-route=no
dial-on-demand=no allow=pap,chap,mschap1,mschap2
[admin@MikroTik] /ppp profile> print
Flags: * - default
0 * name="default" use-mpls=default use-compression=default use-encryption=default only-one=default change-tcp-mss=yes use-upnp=default address-list="" on-up="" on-down=""
1 * name="default-encryption" use-mpls=default use-compression=default use-encryption=yes only-one=default change-tcp-mss=yes use-upnp=default address-list="" on-up="" on-down=""
[admin@MikroTik] /ip ipsec proposal> print
Flags: X - disabled, * - default
0 * name="default" auth-algorithms=sha1 enc-algorithms=aes-128-cbc,3des lifetime=30m pfs-group=none
[admin@MikroTik] /ip ipsec profile> print
Flags: * - default
0 * name="default" hash-algorithm=sha1 enc-algorithm=aes-128,3des dh-group=modp1024 lifetime=1d
proposal-check=obey nat-traversal=yes dpd-interval=30s dpd-maximum-failures=5
[admin@MikroTik] > /log print
21:48:01 l2tp,ppp,info l2tp-out1: initializing...
21:48:01 l2tp,ppp,info l2tp-out1: connecting...
21:48:01 ipsec,debug 0.0.0.0[500] used as isakmp port (fd=25)
21:48:01 ipsec,debug 0.0.0.0[4500] used as isakmp port with NAT-T (fd=27)
21:48:04 ipsec,debug failed to bind to ::[500] Bad file descriptor
21:48:04 l2tp,debug tunnel 867 entering state: wait-ctl-reply
21:48:04 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:04 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:04 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:04 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:04 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:04 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:04 l2tp,debug,packet Firmware-Revision=0x1
21:48:04 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:04 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:04 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:04 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:04 ipsec acquire for policy: 192.168.188.68:1701 <=> ***.***.***.***:1701 ip-proto:17
21:48:04 ipsec peer is IKEv1
21:48:04 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
21:48:04 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
21:48:04 ipsec IPsec-SA request for ***.***.***.*** queued due to no phase1 found.
21:48:04 ipsec,debug ===
21:48:04 ipsec,info initiate new phase 1 (Identity Protection): 192.168.188.68[500]<=>***.***.***.***[500]
21:48:04 ipsec,debug new cookie:
21:48:04 ipsec,debug 6ce2365571b17ab0
21:48:04 ipsec,debug add payload of len 56, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 13
21:48:04 ipsec,debug add payload of len 16, next type 0
21:48:04 ipsec,debug 348 bytes from 192.168.188.68[500] to ***.***.***.***[500]
21:48:04 ipsec,debug 1 times of 348 bytes message will be sent to ***.***.***.***[500]
21:48:04 ipsec sent phase1 packet 192.168.188.68[500]<=>***.***.***.***[500] 6ce2365571b17ab0:0000000000000000
21:48:05 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:05 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:05 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:05 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:05 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:05 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:05 l2tp,debug,packet Firmware-Revision=0x1
21:48:05 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:05 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:05 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:05 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:06 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:06 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:06 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:06 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:06 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:06 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:06 l2tp,debug,packet Firmware-Revision=0x1
21:48:06 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:06 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:06 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:06 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:08 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:08 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:08 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:08 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:08 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:08 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:08 l2tp,debug,packet Firmware-Revision=0x1
21:48:08 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:08 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:08 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:12 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:12 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:12 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:12 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:12 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:12 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:12 l2tp,debug,packet Firmware-Revision=0x1
21:48:12 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:12 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:12 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:12 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:14 ipsec,debug 348 bytes from 192.168.188.68[500] to ***.***.***.***[500]
21:48:14 ipsec,debug 1 times of 348 bytes message will be sent to ***.***.***.***[500]
21:48:14 ipsec resent phase1 packet 192.168.188.68[500]<=>***.***.***.***[500] 6ce2365571b17ab0:0000000000000000
21:48:20 l2tp,debug,packet sent control message to ***.***.***.***:1701 from 0.0.0.0:1701
21:48:20 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
21:48:20 l2tp,debug,packet (M) Message-Type=SCCRQ
21:48:20 l2tp,debug,packet (M) Protocol-Version=0x01:00
21:48:20 l2tp,debug,packet (M) Framing-Capabilities=0x1
21:48:20 l2tp,debug,packet (M) Bearer-Capabilities=0x0
21:48:20 l2tp,debug,packet Firmware-Revision=0x1
21:48:20 l2tp,debug,packet (M) Host-Name="MikroTik"
21:48:20 l2tp,debug,packet Vendor-Name="MikroTik"
21:48:20 l2tp,debug,packet (M) Assigned-Tunnel-ID=867
21:48:20 l2tp,debug,packet (M) Receive-Window-Size=4
21:48:24 ipsec,debug 348 bytes from 192.168.188.68[500] to ***.***.***.***[500]
21:48:24 ipsec,debug 1 times of 348 bytes message will be sent to ***.***.***.***[500]
21:48:24 ipsec resent phase1 packet 192.168.188.68[500]<=>***.***.***.***[500] 6ce2365571b17ab0:0000000000000000
21:48:28 l2tp,debug tunnel 867 received no replies, disconnecting
21:48:28 l2tp,debug tunnel 867 entering state: dead
21:48:28 l2tp,debug session 1 entering state: dead
21:48:28 l2tp,ppp,debug l2tp-out1: CCP close
21:48:28 l2tp,ppp,debug l2tp-out1: BCP close
21:48:28 l2tp,ppp,debug l2tp-out1: IPCP close
21:48:28 l2tp,ppp,debug l2tp-out1: IPV6CP close
21:48:28 l2tp,ppp,debug l2tp-out1: MPLSCP close
21:48:28 l2tp,ppp,info l2tp-out1: terminating... - session closed
Can anybody tell me what I am missing?