Draytek 2820 Dynamic IP to PFSense 2.0.1 (Release)
-
Hello
I hope someone out there can help me with a problem of establishing a LAN to LAN VPN with one side being a draytek 2820 router with a dynamic IP.
My setup is as follows:
PFSence 2.0.1 (Release) box with a static IP eg 91.91.91.233
Draytek 2820 with dynamic IPPFSence LAN : 192.168.3.0 /24
Draytek LAN : 192.168.102.0 /24I have followed instructions on setting up a dynamic to static LAN to LAN connection and am able to setup a phase 1 tunnel but the phase 2 part is failing on the PFSense box. As for as the Draytek is concerned the tunnel is up.
The Log from the PFSence box is as follows:
Feb 28 16:29:37 racoon: ERROR: failed to begin ipsec sa negotication.
Feb 28 16:29:37 racoon: ERROR: no configuration found for 80.150.170.10.
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 91.91.91.233[500]->80.150.170.10[500] spi=2429480935(0x90ceefe7)
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 91.91.91.233[500]->80.150.170.10[500] spi=227816832(0xd943580)
Feb 28 16:29:37 racoon: INFO: no policy found, try to generate the policy : 192.168.102.0/24[0] 192.168.3.0/24[0] proto=any dir=in
Feb 28 16:29:37 racoon: [St Marys]: INFO: respond new phase 2 negotiation: 91.91.91.233[500]<=>80.150.170.10[500]
Feb 28 16:29:37 racoon: [St Marys]: INFO: ISAKMP-SA established 91.91.91.233[500]-80.150.170.10[500] spi:a443933c117c320d:c4ea8ca4794d828380.150.170.10 is the current dynamic WAN IP of the draytek
The Draytek ID is set to test.domain.local
The PFSense has a pre-shared key set to test.domain.localBoth pre shared keys are the same.
Any help would be appreciated.
Regards,
Rod.