Help with NAT (IPsec VPN)

RouterOS General
1

Hello,

We’ve got 3 Routers.

  1. Router 1 has IPsec connection with Router 2. Clients connect from Router 1 to Router 2 server. 172.22.50.0/24 → 172.120.100.22
  2. Router 3 has IPsec connection with Router 1. Clients from Router 3 connect to Router 1 server. 172.190.20.0/24 → 172.22.50.200

If Router 3 hasn’t direct IPsec with Router 2? How clients from Router 3 via Router 1 can reach Router Router 2 ? What NAT rules should I create on both routers so that 172.190.20.0/24 would reach server 172.120.100.22?

Tried different rules but without luck. I would really appreciate any help. Thanks.

2

I still have no solution :frowning: Anyone? Smb said I need to make some route rules, but I know routes aren’t used in IPsec. For example clients from router 1 connects without issues to router 2 without any route rules.

3

The solution has been posted so many times already: do not use direct IPsec tunnels, use GRE or IPIP tunnels over IPsec transport.
Setup /30 addresses on the tunnel, and set BGP peers to eachother. Put the local networks in BGP networks.
Everything will just work without having to fight with NAT.

4

Unfortunately we cannot change connection method at this point, IPsec tunnel. There should be a solution in this case too.