Problem with L2TP server connect

MAXXL · September 28, 2016, 6:51am

Mikrotik RB750GL (6.36.3) L2TP server configured with instruction from WIKI.

No connect to L2TP server from internet. To PPTP (in mikrotik i can connect). In KEENETIC port forwarding rules is writing. If i can connect after KEENETIC (with IP 192.168.1.5 etc) then connect succesfull. In Mikrotik log - “phase 1 negotiation failed due to time up” or “”. What is problem? MTU?

pukkita · September 28, 2016, 2:21pm

If you are running it along with IPSec, you need to open ports UDP 500/4500 in addition to TCP 1701 (L2TP).

MAXXL · September 28, 2016, 2:33pm

rules from KEENETIC

MAXXL · September 29, 2016, 8:00pm

this is debug log
ipsec

Sep/29/2016 22:54:47 ipsec,debug,packet ==========
Sep/29/2016 22:54:47 ipsec,debug,packet 92 bytes message received from xxx.xxx.xxx.xxx[3130] to 192.168.1.100[4500]
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 08100501 ce5ef83e 0000005c 560ce827
Sep/29/2016 22:54:47 ipsec,debug,packet 4de5d8e9 aefed0c4 922cf0f2 312469c9 6ce1fbbc 2bad9225 cc97eedb 130704c0
Sep/29/2016 22:54:47 ipsec,debug,packet 2616b752 792d5600 6c0858b6 d8c28450 733f4ebd 444ef16f 6abb583b
Sep/29/2016 22:54:47 ipsec,debug,packet receive Information.
Sep/29/2016 22:54:47 ipsec,debug,packet compute IV for phase2
Sep/29/2016 22:54:47 ipsec,debug,packet phase1 last IV:
Sep/29/2016 22:54:47 ipsec,debug,packet ccdcab45 89efdda4 f419cb01 602b52e5 ce5ef83e
Sep/29/2016 22:54:47 ipsec,debug,packet hash(sha1)
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet phase2 IV computed:
Sep/29/2016 22:54:47 ipsec,debug,packet e88e2bad 7d8ec1fa 84549eed 69776eac
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet IV was saved for next processing:
Sep/29/2016 22:54:47 ipsec,debug,packet d8c28450 733f4ebd 444ef16f 6abb583b
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet with key:
Sep/29/2016 22:54:47 ipsec,debug,packet e851b7fe 32af471e 09efba55 e04753cd 21f4a4c2 2b9ba3aa 7a0d6ce5 328c2b05
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted payload by IV:
Sep/29/2016 22:54:47 ipsec,debug,packet e88e2bad 7d8ec1fa 84549eed 69776eac
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted payload, but not trimed.
Sep/29/2016 22:54:47 ipsec,debug,packet 0c000018 3e783065 81b2788a ff967c04 e864a4cf a1213714 0000001c 00000001
Sep/29/2016 22:54:47 ipsec,debug,packet 01100001 7fde0ecf 945b6021 966c0b3f c3a644a3 00000000 00000000 0000000c
Sep/29/2016 22:54:47 ipsec,debug,packet padding len=13
Sep/29/2016 22:54:47 ipsec,debug,packet skip to trim padding.
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted.
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 08100501 ce5ef83e 0000005c 0c000018
Sep/29/2016 22:54:47 ipsec,debug,packet 3e783065 81b2788a ff967c04 e864a4cf a1213714 0000001c 00000001 01100001
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 00000000 00000000 0000000c
Sep/29/2016 22:54:47 ipsec,debug,packet HASH with:
Sep/29/2016 22:54:47 ipsec,debug,packet ce5ef83e 0000001c 00000001 01100001 7fde0ecf 945b6021 966c0b3f c3a644a3
Sep/29/2016 22:54:47 ipsec,debug,packet hmac(hmac_sha1)
Sep/29/2016 22:54:47 ipsec,debug,packet HASH computed:
Sep/29/2016 22:54:47 ipsec,debug,packet 3e783065 81b2788a ff967c04 e864a4cf a1213714
Sep/29/2016 22:54:47 ipsec,debug,packet hash validated.
Sep/29/2016 22:54:47 ipsec,debug,packet begin.
Sep/29/2016 22:54:47 ipsec,debug,packet seen nptype=8(hash) len=24
Sep/29/2016 22:54:47 ipsec,debug,packet seen nptype=12(delete) len=28
Sep/29/2016 22:54:47 ipsec,debug,packet succeed.
Sep/29/2016 22:54:47 ipsec,debug,packet xxx.xxx.xxx.xxx delete payload for protocol ISAKMP
Sep/29/2016 22:54:47 ipsec,debug purging ISAKMP-SA 192.168.1.100[4500]<=>xxx.xxx.xxx.xxx[3130] spi=7fde0ecf945b6021:966c0b3fc3a644a3.
Sep/29/2016 22:54:47 ipsec purged IPsec-SA spi=117292667.
Sep/29/2016 22:54:47 ipsec purged ISAKMP-SA 192.168.1.100[4500]<=>xxx.xxx.xxx.xxx[3130] spi=7fde0ecf945b6021:966c0b3fc3a644a3.
Sep/29/2016 22:54:47 ipsec,debug,packet purged SAs.
Sep/29/2016 22:54:47 ipsec,debug pfkey DELETE received: ESP 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130] spi=86286005(0x5249eb5)
Sep/29/2016 22:54:47 ipsec,debug pfkey DELETE received: ESP xxx.xxx.xxx.xxx[3130]->192.168.1.100[4500] spi=117292667(0x6fdbe7b)
Sep/29/2016 22:54:48 ipsec,debug ISAKMP-SA deleted 192.168.1.100[4500]-xxx.xxx.xxx.xxx[3130] spi:7fde0ecf945b6021:966c0b3fc3a644a3 rekey:1
Sep/29/2016 22:54:48 ipsec,debug KA remove: 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130]
Sep/29/2016 22:54:48 ipsec,debug,packet KA tree dump: 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130] (in_use=1)
Sep/29/2016 22:54:48 ipsec,debug,packet KA removing this one...
Sep/29/2016 22:54:48 ipsec,debug,packet an undead schedule has been deleted.

l2tp

Sep/29/2016 22:54:47 ipsec,debug,packet ==========
Sep/29/2016 22:54:47 ipsec,debug,packet 92 bytes message received from xxx.xxx.xxx.xxx[3130] to 192.168.1.100[4500]
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 08100501 ce5ef83e 0000005c 560ce827
Sep/29/2016 22:54:47 ipsec,debug,packet 4de5d8e9 aefed0c4 922cf0f2 312469c9 6ce1fbbc 2bad9225 cc97eedb 130704c0
Sep/29/2016 22:54:47 ipsec,debug,packet 2616b752 792d5600 6c0858b6 d8c28450 733f4ebd 444ef16f 6abb583b
Sep/29/2016 22:54:47 ipsec,debug,packet receive Information.
Sep/29/2016 22:54:47 ipsec,debug,packet compute IV for phase2
Sep/29/2016 22:54:47 ipsec,debug,packet phase1 last IV:
Sep/29/2016 22:54:47 ipsec,debug,packet ccdcab45 89efdda4 f419cb01 602b52e5 ce5ef83e
Sep/29/2016 22:54:47 ipsec,debug,packet hash(sha1)
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet phase2 IV computed:
Sep/29/2016 22:54:47 ipsec,debug,packet e88e2bad 7d8ec1fa 84549eed 69776eac
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet IV was saved for next processing:
Sep/29/2016 22:54:47 ipsec,debug,packet d8c28450 733f4ebd 444ef16f 6abb583b
Sep/29/2016 22:54:47 ipsec,debug,packet encryption(aes)
Sep/29/2016 22:54:47 ipsec,debug,packet with key:
Sep/29/2016 22:54:47 ipsec,debug,packet e851b7fe 32af471e 09efba55 e04753cd 21f4a4c2 2b9ba3aa 7a0d6ce5 328c2b05
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted payload by IV:
Sep/29/2016 22:54:47 ipsec,debug,packet e88e2bad 7d8ec1fa 84549eed 69776eac
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted payload, but not trimed.
Sep/29/2016 22:54:47 ipsec,debug,packet 0c000018 3e783065 81b2788a ff967c04 e864a4cf a1213714 0000001c 00000001
Sep/29/2016 22:54:47 ipsec,debug,packet 01100001 7fde0ecf 945b6021 966c0b3f c3a644a3 00000000 00000000 0000000c
Sep/29/2016 22:54:47 ipsec,debug,packet padding len=13
Sep/29/2016 22:54:47 ipsec,debug,packet skip to trim padding.
Sep/29/2016 22:54:47 ipsec,debug,packet decrypted.
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 08100501 ce5ef83e 0000005c 0c000018
Sep/29/2016 22:54:47 ipsec,debug,packet 3e783065 81b2788a ff967c04 e864a4cf a1213714 0000001c 00000001 01100001
Sep/29/2016 22:54:47 ipsec,debug,packet 7fde0ecf 945b6021 966c0b3f c3a644a3 00000000 00000000 0000000c
Sep/29/2016 22:54:47 ipsec,debug,packet HASH with:
Sep/29/2016 22:54:47 ipsec,debug,packet ce5ef83e 0000001c 00000001 01100001 7fde0ecf 945b6021 966c0b3f c3a644a3
Sep/29/2016 22:54:47 ipsec,debug,packet hmac(hmac_sha1)
Sep/29/2016 22:54:47 ipsec,debug,packet HASH computed:
Sep/29/2016 22:54:47 ipsec,debug,packet 3e783065 81b2788a ff967c04 e864a4cf a1213714
Sep/29/2016 22:54:47 ipsec,debug,packet hash validated.
Sep/29/2016 22:54:47 ipsec,debug,packet begin.
Sep/29/2016 22:54:47 ipsec,debug,packet seen nptype=8(hash) len=24
Sep/29/2016 22:54:47 ipsec,debug,packet seen nptype=12(delete) len=28
Sep/29/2016 22:54:47 ipsec,debug,packet succeed.
Sep/29/2016 22:54:47 ipsec,debug,packet xxx.xxx.xxx.xxx delete payload for protocol ISAKMP
Sep/29/2016 22:54:47 ipsec,debug purging ISAKMP-SA 192.168.1.100[4500]<=>xxx.xxx.xxx.xxx[3130] spi=7fde0ecf945b6021:966c0b3fc3a644a3.
Sep/29/2016 22:54:47 ipsec purged IPsec-SA spi=117292667.
Sep/29/2016 22:54:47 ipsec purged ISAKMP-SA 192.168.1.100[4500]<=>xxx.xxx.xxx.xxx[3130] spi=7fde0ecf945b6021:966c0b3fc3a644a3.
Sep/29/2016 22:54:47 ipsec,debug,packet purged SAs.
Sep/29/2016 22:54:47 ipsec,debug pfkey DELETE received: ESP 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130] spi=86286005(0x5249eb5)
Sep/29/2016 22:54:47 ipsec,debug pfkey DELETE received: ESP xxx.xxx.xxx.xxx[3130]->192.168.1.100[4500] spi=117292667(0x6fdbe7b)
Sep/29/2016 22:54:48 ipsec,debug ISAKMP-SA deleted 192.168.1.100[4500]-xxx.xxx.xxx.xxx[3130] spi:7fde0ecf945b6021:966c0b3fc3a644a3 rekey:1
Sep/29/2016 22:54:48 ipsec,debug KA remove: 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130]
Sep/29/2016 22:54:48 ipsec,debug,packet KA tree dump: 192.168.1.100[4500]->xxx.xxx.xxx.xxx[3130] (in_use=1)
Sep/29/2016 22:54:48 ipsec,debug,packet KA removing this one...
Sep/29/2016 22:54:48 ipsec,debug,packet an undead schedule has been deleted.