VPN DOWN - After Upgrade

RouterOS General
1

Hi Guys, I was on 2.9.5 a VPN vs Hotbrick.

After Upgrade, 2.9.13 the VPN was down.

Any changes on deamon?

my config:

[fvazquez@Nodo Pilar] ip ipsec policy> pri
Flags: X - disabled, D - dynamic, I - invalid
0 X src-address=192.168.0.0/24:any dst-address=192.168.1.0/24:any protocol=all action=encrypt level=require
ipsec-protocols=esp tunnel=yes sa-src-address=209.99.227.12 sa-dst-address=201.216.201.177 proposal=Hotbrick
manual-sa=none dont-fragment=clear

[fvazquez@Nodo Pilar] ip ipsec peer> pri
Flags: X - disabled
0 address=201.216.201.177/32:500 secret=“abentus” generate-policy=no exchange-mode=main send-initial-contact=yes
proposal-check=obey hash-algorithm=md5 enc-algorithm=des dh-group=modp768 lifetime=1d lifebytes=0

[fvazquez@Nodo Pilar] ip ipsec proposal> pri
Flags: X - disabled
0 name=“default” auth-algorithms=sha1 enc-algorithms=3des lifetime=30m lifebytes=0 pfs-group=modp1024

1 name=“Hotbrick” auth-algorithms=md5 enc-algorithms=des lifetime=3m lifebytes=0 pfs-group=modp768

Any ideas?

2

any entries in the log?
(why not update to 2.9.14?)


btw. 3 minute key-lifetime is very short.

3

Could be, but, till now, with the RB 520 is not available

The problem was, that the VPN was working OK till the upgrade.

I didn´t find the answer

Rgs,

Fernando

4

Sorry, I forgot message on log

Remote Unknown after finalizing Phase 1

Fernando

5

[fvazquez@Nodo Pilar] ip ipsec policy> pri
Flags: X - disabled, D - dynamic, I - invalid
0 X src-address=192.168.0.0/24:any dst-address=192.168.1.0/24:any protocol=all action=encrypt level=require
ipsec-protocols=esp tunnel=yes sa-src-address=209.99.227.12 sa-dst-address=201.216.201.177 proposal=Hotbrick
manual-sa=none dont-fragment=clear

Why is this policy showing disabled?

Regards

Andrew

6

Thx for your time, just in order to reduce the log.

On this moment is enabled, and the log file is telling Remote Unknown when is tryinng to establish phase I

7

Hi Guys, thenks you very mutch for your support and answer.

After upgraded to 2.9.13 misteriously, VPN start to work.

A minimal answer telling me: Man, wait to the upgrade was to be enogth.

TNX AGAIN

8

One Pice of FYI…

I had 3 routers deployed with VPN to all three “legs”..

I had to upgrade one from 2.9.9 (I think) to 2.9.17..

VPN crashed… Once all routers upgraded to 2.9.17 VPN came back online…

(Oh what fun) but stable since..

Craig