Help Creation VPN IPSEC [Solved]

RouterOS General
1

Hi,

need a big help i have to create a VPN IP SEC from my Central to other two site, i have followd a lots of guide but i have two problem

The connection it’s established but i canno’t ping o do other to the Internal IP of the other site

the IP that i have it’s this

Praticamente la situazione è questa:

  • Principal Site
  • Pal:Public IPo 79.58.xx.xx
    Internal IP 192.168.98.xx
    First Site
  • Tiv : Public IP 212.210.xx.x
    Private IP: 192.168.54.xx
    Second Site
  • Vell: Public IP 188.9.xx.xx
    Private IP: 192.168.5.xx

Plese help me

2

Hello, did you create the NAT rule, and is it in the top of the list?

3

Hi vince, yes, i can connect to a PC to the other Side but the connection it’s very very slow

4

You said:

The connection it’s established but i canno’t ping o do other to the Internal IP of the other site

which reads as if IPsec tunnel is working but no data is passed on it.

So, is it the LAN-to-LAN flowing? Can you reach remote hosts through the VPN? Please check in IPsec > Installed SAs and see if “Current Bytes” increments.

If it’s a matter of slowness, check the latency outside of the tunnel (from public IP to public IP) and compare it with the latency inside the VPN, maybe it’s a matter of connectivity.
You can also check the CPU load of the routers on both sides.

5

Hi yes the current bytes it’s increment’s but it’s very slowly…i think there is a kind of implementation that i didn’t do…because yesterday…after all it was completely functionally

6

If it was working, then there is no reason why it would go slow.
Unless you have added some kind of queues.
Please check CPU and end-to-end latency.

7

I know…but it too very slow…i cannot send o receive packet very quick i’ve connected via Vnc Client to server and the connection it’s impossibile

So i have my mikrotik Behind a router in bridge mode any indeas?