ckleea

請問你用host name to access ? 我只能方放lP才可以連接。

ckleea

回復 6# gfx86674


    奇怪，我的不行。你的ROS版本是那個？

ckleea

你有沒有做一個給lOS？

ckleea

回復 9# gfx86674

Thanks. After I revert back to 6.29.1, I can use hostname to login

ckleea

回復 11# gfx86674


謝謝分享，終於將你的script整理成一個單一script for Android & IOS 手機

1. /ip pool
   
2. add name=IPSec_Xauth ranges=172.19.15.0/24
   
3. 
   
4. /ip ipsec mode-config
   
5. add address-pool=IPSec_Xauth address-prefix-length=24 \
   
6. name="IPSec_Xauth (Android)" split-include=0.0.0.0/0
   
7. 
   
8. /ip ipsec policy group
   
9. add name="IPSec_Xauth (Android)"
   
10. 
    
11. /ip ipsec policy
    
12. add comment="IPSec_Xauth (Android)" dst-address=0.0.0.0/0 \
    
13. group="IPSec_Xauth (Android)" src-address=172.19.15.0/24 template=yes
    
14. 
    
15. /ip ipsec peer
    
16. add auth-method=pre-shared-key-xauth comment="IPSec_Xauth (Android)" \
    
17. enc-algorithm=aes-128 generate-policy=port-strict \
    
18. mode-config="IPSec_Xauth (Android)" \
    
19. passive=yes policy-template-group="IPSec_Xauth (Android)" secret=abcde1234
    
20. 
    
21. /ip firewall mangle
    
22. add action=change-mss chain=forward dst-address=172.19.15.0/30 new-mss=\
    
23.     clamp-to-pmtu passthrough=no protocol=tcp tcp-flags=syn
    
24. add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=no \
    
25.     protocol=tcp src-address=172.19.15.0/30 tcp-flags=syn
    
26. 
    
27. /ip ipsec mode-config
    
28. add address-pool=IPSec_Xauth address-prefix-length=24 \
    
29. name="IPSec_Xauth (IOS)" send-dns=no split-include=0.0.0.0/1,128.0.0.0/1
    
30. 
    
31. /ip ipsec policy group
    
32. add name="IPSec_Xauth (IOS)"
    
33. 
    
34. /ip ipsec proposal
    
35. add lifetime=8h name=xauth pfs-group=none
    
36. 
    
37. /ip ipsec peer
    
38. add auth-method=pre-shared-key-xauth comment="IPSec_Xauth (IOS)" \
    
39.     enc-algorithm=aes-128 generate-policy=port-strict lifetime=8h \
    
40.     local-address=123.123.123.123 mode-config="IPSec_Xauth (IOS)" \
    
41.     nat-traversal=no passive=yes policy-template-group="IPSec_Xauth (IOS)" \
    
42.     secret=abcde1234
    
43. 
    
44. /ip ipsec policy
    
45. add comment="IPSec_Xauth (IOS)" dst-address=0.0.0.0/1 group="IPSec_Xauth (IOS)" \
    
46.     proposal=xauth src-address=172.19.15.0/30 template=yes
    
47. add comment="IPSec_Xauth (IOS)" dst-address=128.0.0.0/1 group="IPSec_Xauth (IOS)" \
    
48.     proposal=xauth src-address=172.19.15.0/30 template=yes

複製代碼

請問 " local-address=123.123.123.123"的意思是甚麼?

ckleea

回復 13# gfx86674

謝謝。

請問你是否android and IOS 共用？。
我的iPhone sometimes work, IPad not works at all

同時，我亦加入IPSec site to site policies, 會有影響？

ckleea

回復 15# gfx86674


    謝謝。