Missing IPsec 'Group' option

RouterOS Beginner Basics
1

I have two RB2011iL routers.

Each came with a version 5.x of the firmware. This version does not have the ‘Groups’ section in IPsec, which I need.

I upgraded each to firmware 6.11 via the Packages / Update button. I rebooted each. I went to System / Routerboard and updated the firmware from the original 3.10 to the latest showing 3.12.

I rebooted each again.

Now, one of them shows the Groups option, while the other doesn’t. They both show the same software 6.11 and firmware 3.12. They both show the same “Packages” list items. I am not sure what else to check.

I really like the product but am finding the documentation lacking in these basics. It seems likely I am doing something wrong and there is some configuration problem.

Thanks,

Thomas

2

Can you see

“/ip ipsec policy group” menu in CLI?

3

Diffie-Hellman Groups

Diffie-Hellman (DH) key exchange protocol allows two parties without any initial shared secret to create one securely. The following Modular Exponential (MODP) and Elliptic Curve (EC2N) Diffie-Hellman (also known as “Oakley”) Groups are supported:

Diffie-Hellman Group Name Reference :
Group 1 = 768 bit MODP group RFC 2409
Group 2 = 1024 bits MODP group RFC 2409
Group 3 = EC2N group on GP(2^155) RFC 2409
Group 4 = EC2N group on GP(2^185) RFC 2409
Group 5 = 1536 bits MODP group RFC 3526

http://wiki.mikrotik.com/wiki/Manual:IP/IPsec