Community discussions

MikroTik App
 
AlexPopov
just joined
Topic Author
Posts: 5
Joined: Wed May 16, 2012 9:58 am

Can't add IPsec Policy

Wed May 16, 2012 11:09 am

I try to set up ipsec channel with RB750G as a client
First adding ipsec policy...

I enter source and dest addresses (via WinBox) and... "Couldn't add New IPsec Policy - transport mode policy must match sa endpoints (6)"

what is wrong?
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: Can't add IPsec Policy

Wed May 16, 2012 11:29 am

Set IPSec 'Peer' and 'Proposal' first, then 'Policy'.

HTH,
 
AlexPopov
just joined
Topic Author
Posts: 5
Joined: Wed May 16, 2012 9:58 am

Re: Can't add IPsec Policy

Wed May 16, 2012 12:44 pm

well, I have a default proposal and I have set up two peers (local and remote IPs)
it doesn't help!
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: Can't add IPsec Policy

Thu May 17, 2012 12:35 am

In 'IPSec/Peer' set only remote peer, not local.
You can find manual and step-by-step example here:
http://wiki.mikrotik.com/wiki/Manual:IP/IPsec

HTH,
 
vik1988
Member Candidate
Member Candidate
Posts: 235
Joined: Sun Oct 25, 2009 2:18 pm
Location: India

Re: Can't add IPsec Policy

Thu May 17, 2012 7:04 am

Are you adding transport mode...if no then please check tunnel in advance TAB.

Who is online

Users browsing this forum: No registered users and 165 guests