Good morning,
I want to create a ipsec tunnel between two networks
Remote network (Fortigate)
Public IP 88.26.150.162
Gateway Remota: 10.0.0.112
Local network: 10.0.0.0/20
My Network (Mikrotik)
Public IP 83.60.112.143
Gateway : 10.56.0.5
Local network: 10.56.0.0
I have set up like this
Mikrotiks
Src Address 10.56.0.0/20
Dst Address 10.0.0.0/20
Action encrypt
level require
IPsec Protocols esp
tunnel yes
SA Src Address 83.60.112.143
SA Dst Address 88.26.150.162
Proposal default
IPsec Peer
Address 88.26.150.162
Port 500
Auth Method: pre shared key
Secret ******
Exchange Mode: main
send initial contact yes
Nat Traversasl no
IPsec Proposal
Auth Algorithms
sha1
Encr. Algorithms
3des = yes
Ip Firewall Nat
chain srcnat
Src Address 10.56.0.0/20
Dst Address 10.0.0.0/20
Action Accept
chain scrnat
Src Address 10.56.0.0/20
Action masquarade
This is my setting but it is not possible no raise the tunnel i get the log
“ignore because do not listen on source address : 83.60.112.143”
and when a ping a remote ip i get
timeout package rejected.
Anybody can help me please?
Thanks in advance for your great help
Regars
jlscscsi ![]()