Hello,
I have setup 2 EdgeRouter PoE 5, both are working fine to provide internet and L2TP vpn, the ipsec tunnel is up and running but I can't get any traffic passing between the two.
Main Office : WAN : 1.1.1.1 Lan : 192.168.0.0/24
Remote Office : WAN : 2.2.2.2 Lan : 192.168.1.0/24
I have done some research and it seeam that the most common problem is firewall, I tried to add a simple rule to accept all traffic between them, it didn't work, I then tried to set the default action for WAN_IN and WAN_LOCAL to accept on both sides, it didn't work, I then tried to add a pass-all rule (no filtering on source/destination, all protocols..) on WAN_IN and WAN_LOCAL and I still didn't have a ping or rdp.
This is why I think it might not be a firewall problem.
ubnt@EdgeMain:~$ show vpn ipsec sa peer-2.2.2.2-tunnel-1: #7, ESTABLISHED, IKEv1, 71b7006be55308a5:6eda7509e8e63d73 local '1.1.1.1' @ 1.1.1.1 remote '2.2.2.2' @ 2.2.2.2 AES_CBC-128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 established 88s ago, reauth in 27946s peer-2.2.2.2-tunnel-1: #1, REKEYING, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048 installed 90 ago, rekeying in 2596s, expires in 3512s in c537ef11, 60 bytes, 1 packets, 1s ago out ca56bc95, 0 bytes, 0 packets local 192.168.0.0/24 remote 192.168.1.0/24 peer-2.2.2.2-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048 installed 86 ago, rekeying in 2438s, expires in 3515s in c59961d9, 1020 bytes, 17 packets, 1s ago out c790f657, 530 bytes, 5 packets, 12s ago local 192.168.0.0/24 remote 192.168.1.0/24
ubnt@EdgeRemote:~$ show vpn ipsec sa peer-1.1.1.1-tunnel-1: #2, ESTABLISHED, IKEv1, 71b7006be55308a5:6eda7509e8e63d73 local '2.2.2.2' @ 2.2.2.2 remote '1.1.1.1' @ 1.1.1.1 AES_CBC-128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 established 71s ago, reauth in 28110s peer-1.1.1.1-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048 installed 72 ago, rekeying in 2655s, expires in 3529s in ca56bc95, 0 bytes, 0 packets out c537ef11, 60 bytes, 1 packets, 4s ago local 192.168.1.0/24 remote 192.168.0.0/24 peer-1.1.1.1-tunnel-1: #1, INSTALLED, TUNNEL, ESP:AES_CBC-128/HMAC_SHA1_96/MODP_2048 installed 71 ago, rekeying in 2688s, expires in 3531s in c790f657, 318 bytes, 3 packets, 5s ago out c59961d9, 780 bytes, 13 packets, 4s ago local 192.168.1.0/24 remote 192.168.0.0/24
See attached the complete config for both edgemax.
Thank you for you time and your replies