VPN Connection from Fritz!Box 7490 to Mikrotik Router

RouterOS General
1

Hi folks,

I want to connect an employees home router (Fritz!Box 7490) to our central company router but unfortunately the Router’s config page is not very self-explaining on WHAT exact method of VPN (L2TP / PPP / IPsec) in what detailed sub-configuration is used for this particular connection. And a lot of google work did not solve the issue too.

I added a picture of the web interface. Sorry for the german language, couldn’t find a way to easily change this to english.
Bildschirmfoto 2015-11-05 um 00.15.07.png
Anyone who can give me a hint?

chg123

2

Hello,

You are in the wrong way. if you want to set up a VPN connection, you have to choose LAN to LAN linkup option.

If you want to change the language, just go to Settings, then Sprasche (or something like this).

regards,

3

Here’s the list:

L2TP over IPSec - Connect this FRITZ!Box with a company’s VPN
IPSec - Connect your home network with another FRITZ!Box network (LAN-LAN linkup)
PPP - Not listed (it’s not a VPN protocol)

If the employee does not have a fixed IP address you’re better off using the L2TP option. If the employee has a fixed IP, you can choose the solution that best fits your needs.

AVM has some information about their VPN implementation on their website.

They provide a configuration tool here. This will allow you to create a config file that the user can import. That way you can take away the need for the employee to go through the web config steps. It also provides you with more control over the VPN config then you get with the web-interface. This PDF gives you some pointers on the layout of the config file. You can find the values for the phase1ss (IKE Phase 1) and phase2ss (IKE Phase 2) by clicking on the linkt. I found these links on this site.

Last but not least, there’s a tutorial on this site that explains how to config a VPN between two fritzboxes. It might be helpful.

I’ve got a VPN connection between my core router and several Fritzboxes running FritzOS 6.30. It’s been running without a glitch for almost a year now. I ended up choosing a pure IPSec connection (no L2TP over IPSec) as this fits my needs best. As a result I do need to implement a policy for every additional subnet as an IPSec VPN does not provide a routable interface.

4

Dear all,

Ive tried hours to get a working VPN Connection between a FritzBox 7490 and 7360 to a MirkoTec Router. Without any success.
I really would be glad if someone can provide there configuration file on the FritzBox (without any secrets of course) and config on the MirkoTek Router.

I tried following several guidelines, including the Guide on the mirkotek website and the connection is not going further than phase 1 (even if).

My configuration: I have several FritzBox with dynamic IPv4 and a Mikrotek Router with a fixed IP. All devices have a FQDN within my domain (FritzBoxes sign up there IPv4 via DynDns).
L2TP over IPSec or pure IPSec is both fine. Only PPTP shouldn’t be used at all.

I really hope someone can assist.

Maybe you can share your configuration?

5

Dear all,

I worked on this today, trying to establish connection beweend Microtik (non public IP address) and a Fritzbox (dynamic public IP address).

Finally working with these settings.

/ip ipsec profile
add dh-group=modp1024 enc-algorithm=aes-256 name=FritzBox
/ip ipsec peer
add address=fritzhost.myfritz.net exchange-mode=aggressive name=RS_40B \
    profile=FritzBox
/ip ipsec proposal
add enc-algorithms=aes-256-cbc,aes-256-ctr,aes-256-gcm,3des name=FritzBox
/ip ipsec identity
add my-id=fqdn:microtickhost.duckdns.org notrack-chain=prerouting peer=RS_40B \
    remote-id=fqdn:fritzhost.myfritz.net secret=presharedkey
/ip ipsec policy
add dst-address=10.15.1.0/24 peer=RS_40B proposal=FritzBox sa-dst-address=\
    fritzhostpublicip sa-src-address=192.168.115.150 src-address=192.168.115.0/24 \
    tunnel=yes

For me, using “my-id=fqdn:…” and “remote-id=fqdn:…” in identity was mandatory for successfull phase 1.

In fritzbox I simply used the gui to create a lan-lan connection.

Hope this helps

6

Hi everyone,

as mentioned by unlikely I copied all the code and the VPN L2TP/IPSec gives me a connection established but every 4 or 5 minutes it disconnects and then reconnects again and again.
The error that the Fritz gives me is: "The VPN connection with the remote host has been closed. Cause: 3 IKE servers ".

Has anyone had similar problems?

Thanks