Added by. The counter does not increase.
Is there no need to attach a rule?
NAT Traversal do not need to set?
It stood for 5 minutes and earned. Now I’m trying to understand why.
Thank you very much for the help!
The counter with the NO NAT rule does not increment.
Although everything is working.
Is the dynamic IP on your Mikrotik routeable (i.e. “real”)? In case it is NAT traversal is not needed.
Probably was waiting for the first outgoing ESP packet from your Mikrotik. Check your firewall filter rules, make sure you accept ipsec-esp in the input chain. And if you enable NAT traversal then 4500/udp should be accepted in the input chain as well.
Welcome!
I have another subnet for asa. How to add it correctly?
I will write Nat and Filter Rules. IPsec Policies new to create.
Is that all?
The new IPsec Policies - Status SA Src. Address: 0.0.0.0
Not to pay attention ?
Yep, that should be it.
For a newly create policy that’s normal. It should be changed to the real address once an SA for that policy is established (and that won’t happen until the first packet matching that policy arrives).