IPsec IKEv1/2 between Peplink with dynamic IP LTE to Cisco Router C8200?

General
1

Hi!
Trying hard to figuere out the right configuration to establish a IPsec between a Peplink Dome Pro with SimInjektor and dynamic public IP and a Cisco C8200 Router with a static public IP.

Did all the configuration Crypto Profile, Keyring, Proposal and Policy but it themees that Cisco wont accept any ingoing IPSec Phase1/2 from a dynamic IP from the PEPLINK Dome Pro.

Issue is the “dynamic IP” u can use 0.0.0.0 0.0.0.0 and set additional to the PSK a FQDN or a Email instead of the dynamic IP. Issue here i cant use DYNDNS this means a normal FQDN will not work. Without the IP and a FQDM or EMAIL Cisco need to use a “Key-ID” instead of FQDN or EMAIL.

Issue here the Peplink didnt accept a local ID (Key-ID) in letters so u can use instead “[email protected]” as the Key-ID. But this didnt wont work :frowning: The Cisco C8200 dindt see the Phase1 or Phase2.

Think the problem is the Key-ID. Tryed instead a fake “Email” but this wont work to.

Can any body give a simple working how to configure the Cisco router to use IPsec VPN with a Peplink? do anybody did this in the past? all the community entries i can find are from 2010-12 ipsec vpn to cisco???

Thanks for any help!

PS. The Peplink Event log is really a Crap! Only entry u see is "trying to establish IPsec to 80.XXX.XX.XX i mean how u can debug this? We payed round 2000€ for this setup its a shame peplink can u finally help here???

2

Is the Dome in Incontrol2?

3

its not cause of security reasons. just want to establish a normal IKEv1/2 i mean the Peplink has a hole menu point in the GUI for for its calles “IPsec VPN”

4

The reason I asked is that Peplink has a dynamic dns service built into Incontrol2, this would allow you to use the FQDN that the Cisco is expecting.

5

@alexander.hensel , please don’t create multiple posts for the same issue. I just replied to your original post.