Please help with problem. No established VPN Mikrotik - Cisco
PH2 State: no Phase 2
Configuration:
Mikrotik RB951G-2HnD (6.39)
/ip ipsec proposal
add auth-algorithms=sha256 enc-algorithms=3des name=proposal2
/ip ipsec peer
add address=88.88.88.88/32 dpd-interval=disable-dpd enc-algorithm=3des
exchange-mode=aggressive hash-algorithm=sha256 nat-traversal=no secret=secret
/ip ipsec policy
set 0 disabled=yes
add dst-address=88.88.88.22/32 level=unique proposal=proposal2 sa-dst-address= 88.88.88.88 sa-src-address=77.77.77.77 src-address=77.77.77.77/32 tunnel=yes
Cisco ASR1000
ASR-01#sh run | sec crypto map CM_IPSEC 64|3DESSETSHA256|Norbit|crypto isakmp policy 25
crypto isakmp policy 25
encr 3des
hash sha256
authentication pre-share
group 2
lifetime 86400
crypto ipsec transform-set 3DESSETSHA256 esp-3des esp-sha256-hmac
mode tunnel
crypto map CM_IPSEC 64 ipsec-isakmp
set peer 77.77.77.77
set security-association lifetime seconds 1800
set transform-set 3DESSETSHA256
set pfs group2
match address Norbit
ip access-list extended Norbit
permit ip host 88.88.88.22 host 77.77.77.77
