I have an RB750 and RB751U that worked fine using EOIP and IPSEC, then quit one day.
MT support looked in each end and said there is no problem, but I can't ping addresses from one site to the other.
I have IPsec SAs on each end so the tunnel part is working.
/ip ipsec installed-sa> pr
Flags: A - AH, E - ESP
0 E spi=0xE37BC56 src-address=184.60.xx.yy dst-address=208.127.xx.yy
state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256
auth-key="687746d2908dc6e77292d44e34f1f2f6d1fb0ec9"
enc-key="2cbcbf2d6051e16f994209a39d41ea6a99aafc616c7ec3e30b6a84ed718ee403"
addtime=apr/08/2017 20:17:40 expires-in=12m46s add-lifetime=24m/30m
current-bytes=38208 replay=128
1 E spi=0xCDC0F20 src-address=208.127.xx.yy dst-address=184.60.xx.yy
state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256
auth-key="d68cc4ebe444b30703006099856e917ca9594226"
enc-key="5f86b9dad6ce24c589d39263716417ec0f6c9c7358a3fa0b2d4e069972e294ae"
add-lifetime=24m/30m replay=128
They establish immediately if I flush them.
/interface bridge port> pr
Flags: X - disabled, I - inactive, D - dynamic
INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 LAN port 2 bridge1 0x80 10 none
1 to IND bridge1 0x80 10 none
2 ID LAN port 3 bridge1 0x80 10 none
3 ID ether4-slave-local bridge1 0x80 10 none
** it does not show here but the 'to IND' has the role as root port, the other end has designated port.
/ip address> pr
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK INTERFACE
0 192.168.100.2/24 192.168.100.0 LAN port 2
1 192.168.99.1/24 192.168.99.0 to IND
2 D 208.127.xx.yy/24 208.127.xx.0 WAN port 1
/ip route> pr
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 208.127.xx.1 0
1 ADC 192.168.99.0/24 192.168.99.1 bridge1 0
2 ADC 192.168.100.0/24 192.168.100.2 bridge1 0
3 ADC 208.127.xx.0/24 208.127.xx.yy WAN port 1 0
/interface eoip> pr
Flags: X - disabled, R - running
0 R name="to IND" mtu=1300 actual-mtu=1300 l2mtu=65535
mac-address=02:6C:26:94:xx:yy arp=enabled arp-timeout=auto
loop-protect=default loop-protect-status=off loop-protect-send-interval=5s
loop-protect-disable-time=5m local-address=208.127.xx.yy
remote-address=184.60.xx.yy tunnel-id=1 dscp=inherit clamp-tcp-mss=yes
dont-fragment=no ipsec-secret="***" allow-fast-path=no
I set the MTU to 1300 to see if that would help based on posts I read, did not help.
/interface bridge> pr
Flags: X - disabled, R - running
0 R name="bridge1" mtu=auto actual-mtu=1300 l2mtu=1524 arp=enabled
arp-timeout=auto mac-address=02:6C:26:94:xx:yy protocol-mode=rstp
priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00
max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
The router IND has the same setup with 192.168.100.10 and 192.168.99.2.
IND can't ping itself at 192.168.99.2 but does ping 192.168.99.1 with mid 80ms response times.
The other end pings 192.168.99.1 with 0 ms times but can't ping IND at .2.
This makes no sense to me, I give up.