Code: Select all
Feb/28/2017 16:49:50 ipsec,debug peers single bundle:
Feb/28/2017 16:49:50 ipsec,debug (proto_id=ESP spisize=4 spi=09282815 spi_p=00000000 encmode=Transport reqid=0:0)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=DES encklen=0 authtype=hmac-sha256)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=DES encklen=0 authtype=hmac-sha1)
Feb/28/2017 16:49:50 ipsec,debug (trns_id=DES encklen=0 authtype=hmac-md5)
Code: Select all
# feb/28/2017 23:30:40 by RouterOS 6.39rc38
# software id = YA84-5K8U
#
/ip ipsec proposal
add auth-algorithms=sha1 enc-algorithms=aes-256-cbc name=proposal1 pfs-group=modp8192
/ip ipsec peer
add address=0.0.0.0/0 dh-group=modp8192,modp6144,modp4096,modp3072,modp2048,modp1536,modp1024 dpd-interval=15s enc-algorithm=aes-256 exchange-mode=main-l2tp \
generate-policy=port-strict lifetime=1h32m secret=redacted send-initial-contact=no
/ip ipsec policy
set 0 disabled=yes
add dst-address=0.0.0.0/0 proposal=proposal1 src-address=0.0.0.0/0 template=yes