Setup guide

conn mt

left=192.168.0.108

leftsubnet=192.168.87.0/24

right=192.168.0.155

rightsubnet=10.0.0.0/24

authby=secret

pfs=no

auto=add

• ipsec.secrets config file:

192.168.0.108 192.168.0.155 : PSK "gvejimezyfopmekun"

• Wandy Router configuration:

[admin@Wandy] > /ip ipsec peer add address=192.168.0.108 \

\... secret="gvejimezyfopmekun" hash-algorithm=md5 enc-algorithm=3des \

\... dh-group=modp1024 lifetime=28800s

[admin@Wandy] > /ip ipsec proposal auth-algorithms=md5 \

\... enc-algorithms=3des pfs-group=none

[admin@Wandy] > /ip ipsec policy add sa-src-address=192.168.0155 \

\... sa-dst-address=192.168.0.108 src-address=10.0.0.0/24 \

\... dst-address=192.168.87.0/24 tunnel=yes

Routes, Equal Cost Multipath Routing, Policy

Routing

Document revision 1.6 (Mon Mar 22 09:10:18 GMT 2004)

This document applies to Wandy RouterOS V2.8

Table of Contents

Summary

Specifications