Hello!
I have three Mikrotik CCR1009-8G-1S-1S+ (on three different sites) having OS v6.35.
I have successfully configured a IPSec tunnel from site 1 to site 2 and another IPSec tunnel from site 2 to site 3. I would avoid configuring another IPSec tunnel from site 1 to site 3.
Unfortunately I can not find a way to connect the Site 1 LAN with the site 3 LAN (through site 2).
I designed a simple diagram below: the green lines are the link that work, the red line is the connection setup that I do not find the way to do.
Please, someone can help me?
Many thanks for support.
Cristian
How did you setup your IPsec tunnels?
With only the IP->IPsec pages or with Interface->Tunnel?
Only from IP → IPSec pages.
Then it is normal that this kind of config does not work.
I recommend you to setup IP Tunnel interfaces with IPsec protection and a /30 address on each of them,
then add static routes on each router that sets the proper route to the other routers, or setup BGP to
do that automatically. BGP is quite easy to get running, just tick the “redistribute connected” checkmark
in the default BGP setup and add a Peer on the Peer tab pointing to the IP address of that IP Tunnel
for the router on the other side. You will automatically see routes to the subnet of the other routers appear
in your routing table.