Hey all,
I’m wondering it some of you faced the same situation.
The goal is to connect a vyos with a cisco router with IPsec.
I get this error message : (WAN_IP and REMOTE_WAN_IP are the real adresses)
cannot respond to IPsec SA request because no connection is known for 0.0.0.0/0===WAN_IP[WAN_IP]…REMOTE_WAN_IP[REMOTE_WAN_IP]===0.0.0.0/0
My config :
set vpn ipsec ipsec-interfaces interface eth0
set vpn ipsec ike-group IKE-1W proposal 5
set vpn ipsec ike-group IKE-1W proposal 5 encryption aes256
set vpn ipsec ike-group IKE-1W proposal 5 hash sha256
set vpn ipsec ike-group IKE-1W lifetime 28800
set vpn ipsec esp-group ESP-1W proposal 5
set vpn ipsec esp-group ESP-1W proposal 5 encryption aes256
set vpn ipsec esp-group ESP-1W proposal 5 hash sha256
set vpn ipsec esp-group ESP-1W lifetime 86400
set vpn ipsec esp-group ESP-1W pfs dh-group5
edit vpn ipsec site-to-site peer REMOTE_WAN_IP
set authentication mode pre-shared-secret
set authentication pre-shared-secret ‘verySecretKey’
set default-esp-group ESP-1W
set ike-group IKE-1W
set local-address WAN_IP
set tunnel 1 local prefix MY_LAN/30
set tunnel 1 remote prefix REMOTE_WAN/24