Hello
I followed this doc step by step and it is not working: tried to ping the gateways (10.1.0.1\10.2.0.1) and it is not working
It is from the official doc.
I am using routerOS3.29
Is this doc deprecated? or what is hapening? i cannot see anything in logs either .. on cisco routers there is debug, is there something similar in routerOS?
- Add accept and masquerading rules in SRC-NAT
for Router1
[admin@Router1] > ip firewall nat add chain=srcnat src-address=10.1.0.0/24
... dst-address=10.2.0.0/24 action=accept
[admin@Router1] > ip firewall nat add chain=srcnat out-interface=public
... action=masquerade
for Router2
[admin@Router2] > ip firewall nat chain=srcnat add src-address=10.2.0.0/24
... dst-address=10.1.0.0/24 action=accept
[admin@Router2] > ip firewall nat chain=srcnat add out-interface=public
... action=masquerade
- configure IPsec
for Router1
[admin@Router1] > ip ipsec policy add src-address=10.1.0.0/24
... dst-address=10.2.0.0/24 action=encrypt tunnel=yes
... sa-src-address=1.0.0.1 sa-dst-address=1.0.0.2
[admin@Router1] > ip ipsec peer add address=1.0.0.2
... exchange-mode=aggressive secret=“gvejimezyfopmekun”
for Router2
[admin@Router2] > ip ipsec policy add src-address=10.2.0.0/24
... dst-address=10.1.0.0/24 action=encrypt tunnel=yes
... sa-src-address=1.0.0.2 sa-dst-address=1.0.0.1
[admin@Router2] > ip ipsec peer add address=1.0.0.1
... exchange-mode=aggressive secret=“gvejimezyfopmekun”
Or can anyone give me a working link?
Also tried this, but the rip updates r not coming:
http://wiki.mikrotik.com/wiki/IPSec_VPN_with_Dynamic_Routing_/_Mikrotik_and_Cisco