Does anyone have experience with IPSEC between Azure and Mikrotiks? I need some guidance, haha.
I created an IPSEC VPN in Azure. Inside the Resource Group, there is a VM, and this VM has the IP 10.0.0.4. I created the VPN by creating a virtual gateway and a local network gateway. In the local network gateway, I configured the Mikrotik’s internet IP and the internal IP (in this case, 192.168.1.0/24). I configured IPSEC on the Mikrotik, and now, from the 192.168.1.0/24 network, I can ping the VM’s IP 10.0.0.4.
I did the same procedure with another network (192.168.4.0/24), and the computers on this network can also ping the VM at 10.0.0.4. Now, from the 192.168.1.0/24 network, I want to ping/access a device that is on the 192.168.4.0/24 network, but the ping only times out, and I can’t access anything on that network. I created a routing table in Azure, but without success, as well as srcnat rules allowing traffic between the IPs. What else can I try?
Thank you, everyone
You need to add a NAT source AzureNet accept above your masquerade rule.
ie.:
/ip firewall nat
add action=accept chain=srcnat dst-address=192.168.4.0/24 src-address=10.0.0.0/24