Hi @sswloski 

Thanks for posting in our business forum.

Can you double-check your Advanced Settings? If possible, please post both sites, and will take a look.

Also, you should check if UDP 500 and 4500 are open on your WAN or not.

Check your WAN IP on both modem routers. Please paste a screenshot from the web GUI of the modem routers that display the WAN IP. Mosaic the parts of the IP address. Just need to make sure you get the public IP address.

Hi @sswloski 

Thanks for posting in our business forum.

sswloski wrote

  @MR.S 
Thank you for your reply
I tried setting the Local and Remote IDs to 'Name' and then assigned GedraGrove1 & CedarGrove2 (swapping local and remote names on the second router), but it still hasn't managed to form a connection

Is your WAN IP public? Screenshot your modem router's WAN status and mosaic the last two parts. Need both sites.

Hi @sswloski 

Thanks for posting in our business forum.

sswloski wrote

  @Clive_A 
Hello and thank you for your reply

For the advanced settings, One router had more fields set than the other, so I set them to match, with the exception of the Initiator / Responder option
The blanked out IPs of the remote sites are set to those of the ISP routers WAN IPs
The UDP 500 and 4500 port forwarding on the ISP routers are both set between the internal IP of the ER605 and the WAN port


 

Would appreciate it if you could read my previous reply. I need to confirm that you are getting the public IP on the modem router.

I don't have any other options. You can try to Wireshark on the WAN and see if the UDP 500 and 4500 were used. Or use the filter isakmp.

A proper IPsec negotiation would look like this. So you try to port mirroring a computer to your modem router's WAN and Wireshark. IP used should be the public IP address.

Example: