Hello!! I’ve trying to set up a VPN server on a mikrotik v6.36 following same instructions from multiple websites, but I can’t make it to work.
On macOS logs I can see phase 1 and 2 are succesful, but login process keep showing these errors:
por omisión 14:44:50.344702 +0200 racoon IKEv1 Phase 1 AUTH: success. (Initiator, Main-Mode Message 6).
por omisión 14:44:50.344760 +0200 racoon IKE Packet: receive success. (Initiator, Main-Mode message 6).
por omisión 14:44:50.344824 +0200 racoon IKEv1 Phase 1 Initiator: success. (Initiator, Main-Mode).
por omisión 14:44:50.345055 +0200 racoon IPSec Phase 1 established (Initiated by me).
por omisión 14:44:50.345099 +0200 racoon IPSec Phase 1 established (Initiated by me).
por omisión 14:44:51.099384 +0200 racoon IPSec Phase 2 started (Initiated by me).
por omisión 14:44:51.099403 +0200 racoon IPSec Phase 2 started (Initiated by me).
por omisión 14:44:51.099539 +0200 racoon >>>>> phase change status = Phase 2 started
por omisión 14:44:51.099574 +0200 racoon >>>>> phase change status = Phase 2 started
por omisión 14:44:51.100148 +0200 racoon IKE Packet: transmit success. (Initiator, Quick-Mode message 1).
por omisión 14:44:51.161499 +0200 racoon IKE Packet: receive success. (Initiator, Quick-Mode message 2).
por omisión 14:44:51.161707 +0200 racoon IKE Packet: transmit success. (Initiator, Quick-Mode message 3).
por omisión 14:44:51.162185 +0200 racoon IKEv1 Phase 2 Initiator: success. (Initiator, Quick-Mode).
por omisión 14:44:51.162347 +0200 racoon IPSec Phase 2 established (Initiated by me).
por omisión 14:44:51.162386 +0200 racoon IPSec Phase 2 established (Initiated by me).
por omisión 14:44:51.162607 +0200 racoon >>>>> phase change status = Phase 2 established
por omisión 14:44:51.162639 +0200 racoon >>>>> phase change status = Phase 2 established
por omisión 14:44:51.162731 +0200 pppd IPSec connection established
error 14:44:52.139744 +0200 pppd L2TP received Auth Challenge AVP - not supported
error 14:44:52.179672 +0200 pppd L2TP received invalid message (expected ICRP, received StopCCN)
por omisión 14:44:52.180569 +0200 nesessionmanager NESMLegacySession[EATA:6F3F121E-9FF9-444E-AD0F-E52FE7D951B6]: status changed to disconnecting
por omisión 14:44:52.180945 +0200 racoon IPSec disconnecting from server
Here’s my config on the router:
L2TP Server: enabled
Authentication: mschap2
Use IPSEC: disabled
Allow fastpath: enabled
Default profile: my-config
my-config profile:
local-address: 192.168.8.1
pool: my-vpn-pool
dns-server: 8.8.8.8
Change TCP MSS: yes
Use PHP: default
Use MPLS: default
Use compression: default
Use Encryption: required
I think everything on the L2TP and IPSec is OK, but something is wrong with authentication ![]()
Thank you!