Draytek 2820 Dynamic IP to PFSense 2.0.1 (Release)
roderick1st last edited by
I hope someone out there can help me with a problem of establishing a LAN to LAN VPN with one side being a draytek 2820 router with a dynamic IP.
My setup is as follows:
PFSence 2.0.1 (Release) box with a static IP eg 22.214.171.124
Draytek 2820 with dynamic IP
PFSence LAN : 192.168.3.0 /24
Draytek LAN : 192.168.102.0 /24
I have followed instructions on setting up a dynamic to static LAN to LAN connection and am able to setup a phase 1 tunnel but the phase 2 part is failing on the PFSense box. As for as the Draytek is concerned the tunnel is up.
The Log from the PFSence box is as follows:
Feb 28 16:29:37 racoon: ERROR: failed to begin ipsec sa negotication.
Feb 28 16:29:37 racoon: ERROR: no configuration found for 126.96.36.199.
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 188.8.131.52->184.108.40.206 spi=2429480935(0x90ceefe7)
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 220.127.116.11->18.104.22.168 spi=227816832(0xd943580)
Feb 28 16:29:37 racoon: INFO: no policy found, try to generate the policy : 192.168.102.0/24 192.168.3.0/24 proto=any dir=in
Feb 28 16:29:37 racoon: [St Marys]: INFO: respond new phase 2 negotiation: 22.214.171.124<=>126.96.36.199
Feb 28 16:29:37 racoon: [St Marys]: INFO: ISAKMP-SA established 188.8.131.52-184.108.40.206 spi:a443933c117c320d:c4ea8ca4794d8283
220.127.116.11 is the current dynamic WAN IP of the draytek
The Draytek ID is set to test.domain.local
The PFSense has a pre-shared key set to test.domain.local
Both pre shared keys are the same.
Any help would be appreciated.