<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-7">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p>We've done it a bit (and are currently running some) on Telstra.internet (if I recall correctly) using DMVPN with Cisco gear to do it, so its not an exact match to your situation.</p>
<p><br>
</p>
<p>Never noticed any specific IKEv2 issues though.</p>
<p><br>
</p>
<p>Cheers,</p>
<p>Ayden<br>
</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> AusNOG <ausnog-bounces@lists.ausnog.net> on behalf of James Andrewartha <trs80@ucc.gu.uwa.edu.au><br>
<b>Sent:</b> Friday, 7 August 2020 1:57:44 AM<br>
<b>To:</b> Daniel Carpenter<br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] IPsec issues over Telstra</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On Thu, 6 Aug 2020, Daniel Carpenter wrote:<br>
<br>
> Anyone seeing any new issues forming IPsec IKEv2 tunnels over both Telstra.internet and Telstra.extranet lately? I¢ve been<br>
> trying to implement a new hub and spoke for a new environment using a HA pair of FortiGate 300e as the hub and Teltonika RUTX11<br>
> as the end devices. My P1 and P2 come up fine but have little luck sending any traffic. Static routes created with the tunnels<br>
> on both ends appear fine. I¢ve tested the RUTX11 on our external wan with a public IP out of our APNIC provided subnet and it<br>
> works flawlessly. Not operational yet luckily but if I cant figure it out in a week or two ill be forced to do it with OpenVPN.<br>
> Or configure it with IPv6.<br>
<br>
I can do it (IKEv1 though) with the embedded LTE modem in a FGT <br>
30E-3G4G-GBL, but if I use a Netgear LB2120 connected to the FGT, the VPN <br>
doesn't come up (I haven't investigated further yet due to lack of time).<br>
<br>
-- <br>
# TRS-80 trs80(a)ucc.gu.uwa.edu.au #/ "Otherwise Bub here will do \<br>
# UCC Wheel Member <a href="http://trs80.ucc.asn.au/">http://trs80.ucc.asn.au/</a> #| what squirrels do best |<br>
[ "There's nobody getting rich writing ]| -- Collect and hide your |<br>
[ software that I know of" -- Bill Gates, 1980 ]\ nuts." -- Acid Reflux #231 /</div>
</span></font>
</body>
</html>