search

hwdsl2 / setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Other
25.38k stars 6.33k forks source link

After update clients mikrotitk not connection #1008

Closed jchelp closed 3 years ago

jchelp commented 3 years ago

I was using the previous version with the ubuntu 20.4 server and mikrotik clients authenticating only with ipsec key, but I was having constant drops, after I ran the vpnup.sh not even the vpn interface went up anymore, I saw that it has some certificates, can I give a help, how to solve this problem?

Checklist

Describe the issue A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

  1. ...
  2. ...

Expected behavior A clear and concise description of what you expected to happen.

Logs Check logs and VPN status, and add error logs to help explain the problem, if applicable.

Server (please complete the following information)

Client (please complete the following information)

Additional context Add any other context about the problem here.

hwdsl2 commented 3 years ago

@jchelp Hello! If 4.5 doesn't work for your use case, you may re-install the older 4.4 version on your VPN server:

wget https://git.io/vpnupgrade -O vpnup.sh
nano -w vpnup.sh
# Replace SWAN_VER=4.5 with SWAN_VER=4.4
# Then save the file and run:
sudo sh vpnup.sh

I am not familiar with Mikrotik as a VPN client, but #914 suggests IKEv2 [1] may work better (compared to IPsec/L2TP), which you can give a try. In addition, you can check VPN logs for errors [2].

[1] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto.md [2] https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status

jchelp commented 3 years ago

Thanks for the answer I managed to make it work again with L2PT in this new version but I would like to use IKEv2 to close the connection on the client side got ip but on the server did not go up any interface or routes on the clients if you have any tips I would appreciate it and congratulations for the project.