Title pretty much says it all. I can’t really provide more details, but in a configuration that was working fine in 6.7 I have two routers that connect via a EOIP over IPSec tunnel. When I pass traffic across the tunnel with 6.8rc1 Latest one or the other winds up getting rebooted by the watchdog without generating a supout or giving me any more information. Any help?
It also may be related to OSPF…
Relevant parts of config from one side … Other side is identical just backwards.
/interface l2tp-server
add name=l2tp-Username user=Username
/interface bridge
add comment=“Guest Bridge” l2mtu=1594 name=bridge-guest
add admin-mac=MAC comment=“Local Bridge” l2mtu=1598 name=
bridge-local
add comment=“Loopback Bridge” name=bridge-loopback
add comment=“VPN Bridge” name=bridge-vpn
/interface eoip
add comment=+eoip+myhost.org mac-address=MAC name=
eoip-myhost remote-address=MYIP tunnel-id=0
/ip neighbor discovery
set ether01-gateway discover=no
set sfp1-gateway discover=no
set bridge-guest comment=“Guest Bridge”
set bridge-local comment=“Local Bridge”
set bridge-loopback comment=“Loopback Bridge”
set bridge-vpn comment=“VPN Bridge”
set eoip-myhost comment=+eoip+myhost.org
/ip ipsec policy group
add name=l2tp-roadwarrior
add name=ipsec-roadwarrior
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
add auth-algorithms=null enc-algorithms=aes-128-gcm name=site-to-site
add enc-algorithms=3des,aes-256-cbc name=l2tp-roadwarrior pfs-group=none
add name=ipsec-roadwarrior
/ip pool
add name=local-pool ranges=10.0.1.220-10.0.1.254
add name=guest-pool ranges=10.0.91.2-10.0.91.254
add name=l2tp-pool ranges=10.0.11.2-10.0.11.99
add name=ipsec-pool ranges=10.0.11.100-10.0.11.199
/ip ipsec mode-cfg
add address-pool=ipsec-pool name=ipsec-roadwarrior split-include=
10.0.0.0/24,10.0.1.0/24
/ppp profile
add bridge=bridge-vpn change-tcp-mss=yes dns-server=10.0.1.1 local-address=
10.0.11.1 name=L2TP-Roadwarrior remote-address=l2tp-pool use-encryption=
yes
/routing ospf instance
set [ find default=yes ] router-id=10.255.255.2
/interface l2tp-server server
set default-profile=L2TP-Roadwarrior enabled=yes
/ip address
add address=10.0.1.1/24 comment=Local interface=bridge-local network=10.0.1.0
add address=10.0.91.1/24 comment=Guest interface=bridge-guest network=
10.0.91.0
add address=10.0.11.1/24 comment=VPN interface=bridge-vpn network=10.0.11.0
add address=172.16.0.2/30 comment=+eoip+myhost.org interface=
eoip-myhost network=172.16.0.0
add address=10.255.255.2/32 comment=Loopback interface=bridge-loopback
network=10.255.255.2
/ip dhcp-server network
add address=10.0.1.0/24 comment=Local dns-server=10.0.1.1 gateway=10.0.1.1
add address=10.0.91.0/24 comment=Guest dns-server=10.0.91.1 gateway=10.0.91.1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4
/ip ipsec peer
add address=MYIP/32 auth-method=rsa-key comment=
+eoip+myhost.entrydns.org dpd-interval=disable-dpd dpd-maximum-failures=1
key=FadHome passive=yes remote-key=MyHost send-initial-contact=no
add comment=“L2TP Roadwarrior” enc-algorithm=3des exchange-mode=main-l2tp
generate-policy=port-override nat-traversal=yes policy-group=
l2tp-roadwarrior secret=SECRET
add auth-method=pre-shared-key-xauth comment=“IPSec Roadwarrior”
exchange-mode=aggressive generate-policy=port-override mode-cfg=
ipsec-roadwarrior nat-traversal=yes passive=yes policy-group=
ipsec-roadwarrior secret=SECRET
send-initial-contact=no
/ip ipsec policy
add comment=+eoip+myhost.entrydns.org dst-address=MYIP/32 proposal=
site-to-site protocol=gre sa-dst-address=MYIP sa-src-address=
REMOTE_IP src-address=REMOTE_IP/32
add comment=“L2TP Roadwarrior” group=l2tp-roadwarrior proposal=
l2tp-roadwarrior template=yes
add comment=“IPSec Roadwarrior” group=ipsec-roadwarrior proposal=
ipsec-roadwarrior template=yes
/ppp secret
add name=Username password=
SECRET profile=
L2TP-Roadwarrior service=l2tp
/routing ospf interface
add interface=bridge-local network-type=broadcast passive=yes
add interface=bridge-vpn network-type=broadcast passive=yes
/routing ospf network
add area=backbone network=10.0.1.0/24
add area=backbone network=10.0.11.0/24
add area=backbone network=172.16.0.0/24