HI
can anyone help me whit the configuration to allow vpn l2tp/ipsec using router os 6.43.12 and iphone ios 12.1.3
I tried allot of approaches non worked.

it use to work on older router OS like 6.41 but those are vulnerable.

always receive
14:21:16 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
14:21:16 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
14:21:16 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=DES-CBC
14:21:16 ipsec,debug type=Authentication Method, flag=0x8000, lorv=XAuth pskey client
14:21:16 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
14:21:16 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
14:21:16 ipsec rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#15) = AES-CBC:DES-CBC
14:21:16 ipsec rejected authmethod: DB(prop#1:trns#1):Peer(prop#1:trns#15) = pre-shared key:XAuth pskey client
14:21:16 ipsec rejected enctype: DB(prop#1:trns#2):Peer(prop#1:trns#15) = AES-CBC:DES-CBC
14:21:16 ipsec rejected authmethod: DB(prop#1:trns#2):Peer(prop#1:trns#15) = pre-shared key:XAuth pskey client
14:21:16 ipsec rejected enctype: DB(prop#1:trns#3):Peer(prop#1:trns#15) = AES-CBC:DES-CBC
14:21:16 ipsec rejected authmethod: DB(prop#1:trns#3):Peer(prop#1:trns#15) = pre-shared key:XAuth pskey client
14:21:16 ipsec rejected enctype: DB(prop#1:trns#4):Peer(prop#1:trns#15) = 3DES-CBC:DES-CBC
14:21:16 ipsec rejected authmethod: DB(prop#1:trns#4):Peer(prop#1:trns#15) = pre-shared key:XAuth pskey client
14:21:16 ipsec,error no suitable proposal found.
14:21:16 ipsec,error xx.xx.xx.xx failed to get valid proposal.
14:21:16 ipsec,error xx.xx.xx.xx failed to pre-process ph1 packet (side: 1, status 1).
14:21:16 ipsec,error xx.xx.xx.xx phase1 negotiation failed.


thank you,

Looks like you are using "IPsec" (xauth) on the iOS device, but you should be using "L2TP".