Community discussions

 
Dejan
newbie
Topic Author
Posts: 30
Joined: Wed Apr 22, 2015 8:28 am

IPSEC can't connect if LAN ports are down

Mon Feb 29, 2016 2:40 pm

I have one problem and I hope that I will explain it ok... I have Mikrotik RouterBoard which is used on remote Office...

1.) I have one WAN interface(ether1) which have DHCP Client enabled(ISP provide Dynamic IP, Gateway, DNS by DHCP).
2.) I have one bridge interface(ether2&ether3). On this bridge I have assigned local IP 10.60.20.1/24. There is no DHCP Server on this bridge interface and users must use static ip configuration.
3.) This Remote Office have configured IPSEC L2TP VPN which connect to Main Office. It use 10.60.20.0/24 network. In Main Office we use 10.60.1.0/23 .

When VPN is estabilished I can from Main Office normaly ping remote computers and local mikrotik IP(10.60.20.1). This is OK.

When I don't have connected computers on ether2 or ether3 interface(So I have connected only WAN and both LAN's are unpluged), VPN can't connect/estabilish and from Main Office I can't ping remote computers...


Any idea what can be wrong?
 
User avatar
Splash
Member Candidate
Member Candidate
Posts: 151
Joined: Fri Oct 16, 2015 10:09 am
Location: Johannesburg, South Africa

Re: IPSEC can't connect if LAN ports are down

Mon Feb 29, 2016 2:47 pm

Hello,

Check that you don't have the "Dial On Demand" option set for the L2TP Tunnel.
MTCNA, MTCRE, MTCINE, MTCTCE, MTCIPv6E, MTCUME

Who is online

Users browsing this forum: No registered users and 22 guests