Draytek 2820 Dynamic IP to PFSense 2.0.1 (Release)



  • Hello

    I hope someone out there can help me with a problem of establishing a LAN to LAN VPN with one side being a draytek 2820 router with a dynamic IP.

    My setup is as follows:

    PFSence 2.0.1 (Release) box with a static IP eg 91.91.91.233
    Draytek 2820 with dynamic IP

    PFSence LAN : 192.168.3.0 /24
    Draytek LAN : 192.168.102.0 /24

    I have followed instructions on setting up a dynamic to static LAN to LAN connection and am able to setup a phase 1 tunnel but the phase 2 part is failing on the PFSense box. As for as the Draytek is concerned the tunnel is up.

    The Log from the PFSence box is as follows:

    Feb 28 16:29:37 racoon: ERROR: failed to begin ipsec sa negotication.
    Feb 28 16:29:37 racoon: ERROR: no configuration found for 80.150.170.10.
    Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 91.91.91.233[500]->80.150.170.10[500] spi=2429480935(0x90ceefe7)
    Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 91.91.91.233[500]->80.150.170.10[500] spi=227816832(0xd943580)
    Feb 28 16:29:37 racoon: INFO: no policy found, try to generate the policy : 192.168.102.0/24[0] 192.168.3.0/24[0] proto=any dir=in
    Feb 28 16:29:37 racoon: [St Marys]: INFO: respond new phase 2 negotiation: 91.91.91.233[500]<=>80.150.170.10[500]
    Feb 28 16:29:37 racoon: [St Marys]: INFO: ISAKMP-SA established 91.91.91.233[500]-80.150.170.10[500] spi:a443933c117c320d:c4ea8ca4794d8283

    80.150.170.10 is the current dynamic WAN IP of the draytek

    The Draytek ID is set to test.domain.local
    The PFSense has a pre-shared key set to test.domain.local

    Both pre shared keys are the same.

    Any help would be appreciated.

    Regards,

    Rod.


Log in to reply