FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
1,397 views 8 comments
by anonymous

Hi

I have a RUT955 using a LTE connection and a DSL with static and public ip at home. Following the guides I've configured an IPSEC site-to-site VPN connection.

Although both sides show the VPN connected:

Fritz log

20.11.19 23:10:25

VPN connection to ConcordeUMTS [5.90.34.71] IKE SA: DH2/AES-256/SHA1 IPsec SA: ESP-AES-256/SHA1/LT-3600 was established successfully.

RUT log

Wed Nov 20 22:51:46 2019 daemon.info syslog: 10[NET] received packet: from x.x.x.x[4500] to x.x.x.x[4500] (156 bytes)

Wed Nov 20 22:51:46 2019 daemon.info syslog: 10[ENC] parsed QUICK_MODE response 2176487805 [ HASH SA No ID ID ]

Wed Nov 20 22:51:46 2019 daemon.info syslog: 10[IKE] CHILD_SA Casa{2} established with SPIs c3fedca1_i 1ee9ff28_o and TS 192.168.1.0/24 === 192.168.2.0/24

Wed Nov 20 22:51:46 2019 authpriv.info syslog: 10[IKE] CHILD_SA Casa{2} established with SPIs c3fedca1_i 1ee9ff28_o and TS 192.168.1.0/24 === 192.168.2.0/24

The site to site traffic is not working - I cannot ping or reach any hosts from/to both sides.

The IPSEC connection has left/right firewall flagged, although if disable/enable it won't show any changes in the configured/enabled rules in the RUT firewall. I have also tried creating the rule (L2TP-to-LAN and viceversa) manually but still no luck.

What else I could check? 

Thanks

by anonymous

here is a bunch of screen captures

by anonymous
there a lot things I don't understand - why I don't have an interface for the VPN tunnel showing with a ifconfig -a? same reason I don't see any routes in the routing table associated with the IPSEC tunnel.
by anonymous
Anybody can help? is there a way to open a ticket to Teltonika or as a brand new customer the only help provided is through communities?

1 Answer

0 votes
by anonymous
Hello,

Is it that you are trying to configure IPsec tunnel or L2TP over IPsec?
by
good question - to be honest plain IPSec but could not figure out rules for IPsec only in the RUT fw
by anonymous

Please send me a Troubleshoot file, which you can find System-Administration-Troubleshoot. Also, I will need your FRITZ IPsec configuration info. Please send me those via private message.

by anonymous
thanks justin - i've sent you a couple of private messages
by
Hello,

is it possible to publish the solution for this problem?
by
There was not

I returned the equipment / thanks amazon prime