hello for all my friends in this forum ..!
when i was looking around in the router default setting, i notice that in ip-firewall-nat rule there is this IPsec policy was configured as below ..-(see the attached picture)-
so what they mean by that …? and does that important…? is it necessary to put it when we create a masquerade rule…?
It’s a condition saying that this rule will be used only when there’s no existing IPSec policy for packet/connection. It’s useful when you have IPSec tunnels, because otherwise you’d get srcnat not only for connections to internet (where you want it), but also for tunnelled connections to other sites (you don’t want that, because changed source address would no longer match IPSec policy and connections would fail). If you don’t use IPSec, then this condition is not needed.
realy appreciate youe anwer sob..! very satisfy with your explaination..!