IKEv2 for RW - proxy-arp PROBLEM, local-proxy-arp WORKS

RouterOS General
1

Hi

I’m using for 2 years SSTP with certs - works fine. But it’s TCP. Few users have unstable connections at their end and we have frequent drops when they are using RDP. So we set up IKEv2.

IKEv2 set up based on:

https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_using_IKEv2_with_RSA_authentication

Now, IKEv2 works (I can connect and ping to any IP on office subnet) , when bridge ARP set at: local-proxy-arp - BUT then SSTP doesn’t work (I CAN connect per se, but can’t ping to any IP on office subnet).

When bridge ARP is set at: proxy-arp, it’s the opposite. SSTP works (I can connect and ping to any IP on office subnet) , BUT then IKEv2 doesn’t work (I CAN connect per se, but can’t ping to any IP on office subnet).

Tips?