I have 2 Mikrotik routers with an IPSEC tunnel between them. I router sets IPSEC policies manually, it has 2 sets of interesting traffic defined. The other side is set to dynamically generate policy. The problem that I have is that when a policy is dynamically generated for the fist set of interesting traffic, the dynamic side of the tunnel will not generate a second policy to match the second set of interesting traffic. What am I doing wrong? I basically want a HUB router to accept IPSEC connections from any spoke and dynamically generate phase 2 policy for each tunnel that corresponds to the manual policies configured on the spokes. BTW, I am new to mikrotik, love the product so far but am at a bit of a sticking point here.
Thanks,