IPsec Generate Policy From Template

RouterOS General
1

hi
I have the following templates

[admin@number543.lab.mikrotik.me] > ip ipsec policy print detail 
Flags: T - template, X - disabled, D - dynamic, I - inactive, * - default 
 0 TX* group=default src-address=::/0 dst-address=::/0 protocol=all proposal=default template=yes 
 1 T   group=gre src-address=192.168.254.0/24 dst-address=0.0.0.0/0 protocol=all proposal=Pr-Null template=yes 
 2 T   group=gre src-address=192.168.255.0/24 dst-address=0.0.0.0/0 protocol=all proposal=Pr-aes128 template=yes 
 3  D  src-address=192.168.254.1/32 src-port=any dst-address=192.168.254.2/32 dst-port=any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address=1.1.1.2 sa-dst-address=88.88.88.2 priority=2 
 4  D  src-address=192.168.255.1/32 src-port=any dst-address=192.168.255.2/32 dst-port=any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address=1.1.1.2 sa-dst-address=88.88.88.2 priority=2

In templates number 1 and 2 parameter level=unique
Dynamic policies do not set the values of the parameters level and proposal from templates

it is possible to change this behavior?

2

up+

3

up+

4

ROS 6.x is very bugged and level=unique dont work:
http://forum.mikrotik.com/t/how-to-change-defaults-for-auto-generated-ipsec-policies/98874/1

5

It’s being worked on in the latest version though - have a look at the 6.38rc versions (or 6.38 when it gets a final/stable release)