Changes

no edit summary
Line 71: Line 71:  
# Set '''Keep alive''' (30).
 
# Set '''Keep alive''' (30).
 
# Press '''Save'''.
 
# Press '''Save'''.
 +
 +
Now go to '''Services > VPN > IPsec'''.
 +
 +
[[File:]]
 +
 +
# Write '''Pre-shared key''' (write the password which you created with this command /ip ipsec identity add generate-policy=port-override auth-method=pre-shared-key secret="password" peer=l2tpserver ).
 +
# Press '''Save'''.
 +
# Write '''IPsec''' interface name (write anything you want) and press '''Add''.
 +
# When the interface appears like in the example, press '''Edit'''.
 +
 +
[[File:]]
 +
 +
# '''Enable''' instance.
 +
# Select '''Type''' (Transport).
 +
# Write '''Remote VPN endpoint''' (MikroTik public IP address).
 +
# Select '''DH group''' (MODP1024)
 +
# Set all of the settings in '''Phase 2''' to be exactly the same as in the '''Phase 1'''.
 +
# Press '''Save'''.
 +
 +
==Testing configuration==
 +
 +
Go to '''Status > Routes''' and in the '''Active IP Routes''' table you should see this new route:
 +
 +
[[File:]]
 +
 +
Also, you can check whether '''IPsec''' is working by writing this command to CLI:
 +
 +
ipsec status
 +
 +
It should show:
 +
 +
Security Associations (1 up, 0 connecting)
 +
 +
[[File:]]
0

edits

Navigation menu