Good day! I set up IPSEC/IKEv2, it’s connecting and working, but I can ping only DNS server by IP, other pc can’t, and by hostname it can’t find pc, seems like DNS dont work.
The description is too vague, so a lot of assumptions have to be made.
First, is the IPsec initiator (client) a PC or another router?
Second, Windows PCs by default only respond to pings coming from their local subnet. This may explain why you can ping the DNS server but not the PCs (even by address).
Third, the fact that the DNS server responds to pings doesn’t mean that firewall rules on the IPsec responder (server) router do not block DNS queries from the VPN clients. If you run /tool sniffer quick ip-address=ip.of.the.dns on the responder router, and then run ping hostname.of.some.pc on the initiator PC, what does the sniffer show? If everything was correct, you should see the query packet to come via the WAN interface (through which the IPsec SA is established), then leave via the LAN interface (if there is a bridge, you would see it once on the bridge and once on the physical interface), and then you should see the response to arrive via the physical LAN interface and, if present, the bridge. You wouldn’t see it on WAN because sniffer doesn’t show packets before IPsec encryption, but it shows them after IPsec decryption.
I didn’t change anything, but it’s working 