Draytek 2820 Dynamic IP to PFSense 2.0.1 (Release)
I hope someone out there can help me with a problem of establishing a LAN to LAN VPN with one side being a draytek 2820 router with a dynamic IP.
My setup is as follows:
PFSence 2.0.1 (Release) box with a static IP eg 220.127.116.11
Draytek 2820 with dynamic IP
PFSence LAN : 192.168.3.0 /24
Draytek LAN : 192.168.102.0 /24
I have followed instructions on setting up a dynamic to static LAN to LAN connection and am able to setup a phase 1 tunnel but the phase 2 part is failing on the PFSense box. As for as the Draytek is concerned the tunnel is up.
The Log from the PFSence box is as follows:
Feb 28 16:29:37 racoon: ERROR: failed to begin ipsec sa negotication.
Feb 28 16:29:37 racoon: ERROR: no configuration found for 18.104.22.168.
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 22.214.171.124->126.96.36.199 spi=2429480935(0x90ceefe7)
Feb 28 16:29:37 racoon: [St Marys]: INFO: IPsec-SA established: ESP 188.8.131.52->184.108.40.206 spi=227816832(0xd943580)
Feb 28 16:29:37 racoon: INFO: no policy found, try to generate the policy : 192.168.102.0/24 192.168.3.0/24 proto=any dir=in
Feb 28 16:29:37 racoon: [St Marys]: INFO: respond new phase 2 negotiation: 220.127.116.11<=>18.104.22.168
Feb 28 16:29:37 racoon: [St Marys]: INFO: ISAKMP-SA established 22.214.171.124-126.96.36.199 spi:a443933c117c320d:c4ea8ca4794d8283
188.8.131.52 is the current dynamic WAN IP of the draytek
The Draytek ID is set to test.domain.local
The PFSense has a pre-shared key set to test.domain.local
Both pre shared keys are the same.
Any help would be appreciated.