Question

Hi!

I have been fighting with a weird issue with ipsec tunnel in RUT36X_R_00.07.03.4 firmware. I have set up ikev2 ipsec tunnel with Fortigate with two phase2s:

Local network: 192.168.20.0/24

remote network: 192.168.10.0/24

remote network 172.16.1.0/24

First phase2 works fine (192.168.20.0 - 192.168.10.0) but the second remote subnet is routed to default gw by Teltonika. So only the first phase2 gets up. Second one doesnt. If I change them around so that 172... will be the first one, the behavior changes accordingly.

So it seems that only one phase2 is set up and it will be with the first remote subnet configured. Next ones will be discarded.  Is there something I´m missing here or is this a bug?

Answer 1

Hello, 

Could you login to the router's WebUI, navigate to Services -> VPN -> IPsec,  edit instance settings, switch to Advanced settings and enable Compatibility mode, then check if connection gets established? 

If issue persists, please download a troubleshoot file from System -> Administration -> Troubleshoot page and attach it by editing your question. 

Best regards,

Comments

Compatibility mode was the key to the happiness! Thanks!