Gpupdate doesnt work over IPSEC between Mikrotiks

Hi there,

Im new in this forum and mikrotik routers, sorry if I create this topic wrong place.
We have IPSEC VPN between remote site and DC. Both DC and remote site has Mikrotik routers.

Problem: remote site clients cant make gpupdate or add a computer to domain. Because giving RPC Server unavailable or lack of network connectivity error.
I just find a article on the web and tryed steps still ı have problem between two mikrotik routers.https://kolnanblog.wordpress.com/2017/08/23/domain-controllers-client-error-while-using-gpupdate-mikrotik-router/comment-page-1/#comment-9

Im not familiar with mikrotik , Could someone help me ?

What I test it.

  • Clients can ping dns server or domain controller.
  • clients can resolve the domain name from ip adress with nslookup
  • clients can resolve the domain.local with nslookup
  • Clients can access \domain\netlogon or sysvol , or another file server etc.
  • Other remote sites able to make gpupdate or add domain.

Hello, did you make any progress on this? I’m having a similar issue.

Thanks
Duke