Quantcast
Channel: All EdgeRouter posts
Viewing all articles
Browse latest Browse all 60861

EdgeRouter PoE Ipsec site-to-site

$
0
0

Hello,

 

I have setup 2 EdgeRouter PoE 5, both are working fine to provide internet and L2TP vpn, the ipsec tunnel is up and running but I can't get any traffic passing between the two.

 

Main Office : WAN : 1.1.1.1 Lan : 192.168.0.0/24

Remote Office : WAN : 2.2.2.2 Lan : 192.168.1.0/24

 

I have done some research and it seeam that the most common problem is firewall, I tried to add a simple rule to accept all traffic between them, it didn't work, I then tried to set the default action for WAN_IN and WAN_LOCAL to accept on both sides, it didn't work, I then tried to add a pass-all rule (no filtering on source/destination, all protocols..) on WAN_IN and WAN_LOCAL and I still didn't have a ping or rdp.

 

This is why I think it might not be a firewall problem.

 

ubnt@EdgeMain:~$ show vpn ipsec sa
peer-2.2.2.2-tunnel-1: #7, ESTABLISHED, IKEv1, 71b7006be55308a5:6eda7509e8e63d73
  local  '1.1.1.1' @ 1.1.1.1
  remote '2.2.2.2' @ 2.2.2.2
  AES_CBC-128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
  established 88s ago, reauth in 27946s
  peer-2.2.2.2-tunnel-1: #1, REKEYING, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048
    installed 90 ago, rekeying in 2596s, expires in 3512s
    in  c537ef11,     60 bytes,     1 packets,     1s ago
    out ca56bc95,      0 bytes,     0 packets
    local  192.168.0.0/24
    remote 192.168.1.0/24
  peer-2.2.2.2-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048
    installed 86 ago, rekeying in 2438s, expires in 3515s
    in  c59961d9,   1020 bytes,    17 packets,     1s ago
    out c790f657,    530 bytes,     5 packets,    12s ago
    local  192.168.0.0/24
    remote 192.168.1.0/24
ubnt@EdgeRemote:~$ show vpn ipsec sa 
peer-1.1.1.1-tunnel-1: #2, ESTABLISHED, IKEv1, 71b7006be55308a5:6eda7509e8e63d73
  local  '2.2.2.2' @ 2.2.2.2
  remote '1.1.1.1' @ 1.1.1.1
  AES_CBC-128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048
  established 71s ago, reauth in 28110s
  peer-1.1.1.1-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048
    installed 72 ago, rekeying in 2655s, expires in 3529s
    in  ca56bc95,      0 bytes,     0 packets
    out c537ef11,     60 bytes,     1 packets,     4s ago
    local  192.168.1.0/24
    remote 192.168.0.0/24
  peer-1.1.1.1-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048
    installed 71 ago, rekeying in 2688s, expires in 3531s
    in  c790f657,    318 bytes,     3 packets,     5s ago
    out c59961d9,    780 bytes,    13 packets,     4s ago
    local  192.168.1.0/24
    remote 192.168.0.0/24

See attached the complete config for both edgemax.

 

Thank you for you time and your replies Man Happy


Viewing all articles
Browse latest Browse all 60861

Trending Articles