Ho i’im using RouterBOARD 931-2nD
version 6.47beta8
Need help for connect VPN ike 2 i received error
“phase 2 negotiation failed due to send error. 87.26.2.172 [500] <=> 85.94.220.166[500]”
this is the export
ip ipsec profile
add dh-group=modp1024 enc-algorithm=aes-256,aes-192,aes-128,3des name=profile_1
add dh-group=modp1024 dpd-interval=10s enc-algorithm=aes-256,3des name=
Seeweb_Profile
/ip ipsec peer
add address=85.94.220.166/32 local-address=87.26.2.172 name=SEEWEB_GROUP
profile=Seeweb_Profile send-initial-contact=no
/ip ipsec proposal
add auth-algorithms=sha512,sha256,sha1 enc-algorithms=
aes-256-cbc,aes-256-ctr,aes-256-gcm name=SeeWeb_Proposal
/ip ipsec identity
add peer=peer1
add peer=SEEWEB_GROUP
/ip ipsec policy
add dst-address=192.168.98.0/24 peer=peer1 sa-dst-address=95.243.120.6
sa-src-address=0.0.0.0 src-address=192.168.54.0/24 tunnel=yes
add dst-address=10.4.86.0/24 level=unique peer=SEEWEB_GROUP proposal=
SeeWeb_Proposal sa-dst-address=85.94.220.166 sa-src-address=87.26.2.172
src-address=192.168.54.0/24 tunnel=yes
Firewall
/ip firewall filter
add action=accept chain=input dst-port=20,21,500,1701,4500,1194 protocol=udp
add action=accept chain=input dst-port=500,4500,1701,20,21,1194 protocol=tcp
add action=accept chain=input protocol=ipsec-esp
add action=accept chain=input protocol=ipsec-ah
add action=accept chain=forward dst-address=192.168.54.0/24 src-address=
10.4.86.0/24
add action=accept chain=forward dst-address=10.4.86.0/24 src-address=
192.168.54.0/24
add action=accept chain=input comment=“defconf: accept ICMP” disabled=yes
protocol=icmp
add action=accept chain=input comment=“defconf: accept established,related”
connection-state=established,related disabled=yes
add action=drop chain=input comment=“defconf: drop all from WAN” disabled=yes
in-interface=ether1
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related disabled=yes
add action=accept chain=forward comment=“defconf: accept established,related”
connection-state=established,related disabled=yes
add action=drop chain=forward comment=“defconf: drop invalid” connection-state=
invalid disabled=yes
add action=drop chain=forward comment=
“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat
connection-state=new disabled=yes in-interface=ether1
add action=accept chain=forward disabled=yes protocol=ipsec-esp
/ip firewall nat
add action=accept chain=srcnat dst-address=10.4.86.0/24 src-address=
192.168.54.0/24
Thanks in advance