Hi, we're currently in the process of replacing a customer's Sonicwall with a Mikrotik CCR1009-8G-1S-1S+. So far so good but the last stumbling block is that they have a site-to-site VPN between the Sonicwall and a Netgear Prosecure UTM9S.
I've set up VPNs between Mikrotiks before with little issues but this is the first time setting up with a different model router. I've got all settings for protocols as identical as I can but I'm getting errors on the mikrotik saying 'failed to pre-process PH1 packet (side: 1, status 1) phase 1 negotiation failed.
Exported Config of the Mikrotik is:
nov/17/2016 15:37:48 by RouterOS 6.30.4
software id = 362S-EF0D
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des lifetime=1h
/ip ipsec peer
add address=remote IP/32 enc-algorithm=3des passive=yes secret=Secret
/ip ipsec policy
set 0 disabled=yes
add dst-address=10.0.7.0/24 sa-dst-address=remote IP sa-src-address=
local IP src-address=10.0.5.0/24 tunnel=yes
[admin@NWSC Main Router] /ip ipsec>
On the Netgear for the IKE policy it has the local and remote IPs which are mirrored from above
Encryption Algorithm: 3DES
Authentication Algorithm: MD5
Pre-shared key: Secret
DH Group: Group 2 (1024 bit)
SA-Lifetime (sec): 3600
Dead Peer detection: disabled
Xauth: None
VPN Policy:
Type: Auto
Local Gateway: WAN1
Endpoint: Mikrotik IP
Local IP: 10.0.7.0/24
Remote IP: 10.0.5.0/24
Auto Parameters:
SA Lifetime: 3600s
Encryption Algorithm: 3DES
Integrity Algorithm: SHA-1
PFS Key Group: DH Group 2 (1024 bit)
IKE Policy: One listed above
I'm at the stage where I can't see the wood for the trees! Everything looks in order but I have been staring at it that long I could easily have missed something blindingly obvious!
Thanks for looking.