Huge thanks! I am one small step further. "Mikrotik looks for a corresponding static policy linked to that peer" Can you please clarify how can you assign "static policy" linked to peer? I do not see "policy" field in 'peer' and no such thing in 'idenity'. Do you mean, ...

I am struggling to understand IPSEC in Mikrotik. There is a wiki article but it is very incomplete. Does anybody know where can I find information HOW EXACTLY mikrotik uses each part of configuration (profile, proposal, policy, policy group, peer, identity etc.). I understand how IPSEC works, but I ...

+1` transition mechanisms will be more and more important. We are planning to migrate internal company structure to IPv6. And we will have to decide if to drop Mikrotik or to use some not elegant solution like extra server which is a pain becouse we manged to get rid of servers in many locations.

Just in case (google points here) below is a working configuration of ipsec ikev2 / psk vpn: notes: 1.this configuration is NOT touching the "default" profile, "default" identity etc. So it should work in parallel with other VPN types, for instance in paralell with L2TP/ipsec VPN...

Here is a working configuration of ipsec ikev2 / psk vpn: notes: 1.this configuration is NOT touching the "default" profile, "default" identity etc. So it should work in parallel with other VPN types, for instance in paralell with L2TP/ipsec VPN which is creating dynamic identity...

I was trying to do something mikrotik only. Without adding complexity and another scripts to servers which would add another thing to maintain etc. My latest attempt is to try to guess by amount of traffic: /ip firewall filter add action=add-src-to-address-list address-list=rdp_whitelist \ address-l...

I would like to add succesfully connected rdp connections to whitelist. And I have no clue how to detect if the connection is succesfully established or it is just another brute force attempt. I was trying something like": chain=forward action=add-src-to-address-list connection-state=establishe...