Policy based ipsec, all remote locations are having mkt and they are routing ALL traffic into the ipsec tunnel and traffic is going to the central location. Everything is working but the problem is that i cannot access or ping my mikrotik from local network (remote locations). From central location i can access to that mikrotik. The problem occur only when all traffic is going to ipsec.
nat policy on remote locations is: src-nat src address local subnet, dst addrees 0.0.0.0/0, accept
i also put rule on the top of nat tab: src-nat src address local subnet, dst address local mikrotik ip, accept but nothing. I have seen that other also have problem with this.
ipsec policy, local network: local subnet, remote network: 0.0.0.0/0
Is this a bug on mikrotik?