Hello,
I have IPSEC road warrior configured and running. I want to be able to access LAN devices.
I have created secondary ip pool in the same subnet of my home network subnet:
[admin@MikroTik] > ip pool print
NAME RANGES
0 dhcp 192.168.0.100-192.168.0.230
1 ipsec-rw 192.168.0.231-192.168.0.254
Also I've set arp=proxy-arp for bridge interface:
[admin@MikroTik] > interface bridge print
Flags: X - disabled, R - running
0 R name="bridge1" mtu=auto actual-mtu=1500 l2mtu=1598 arp=proxy-arp arp-timeout=auto mac-address=6C:3B:6B:xx:xx:xx protocol-mode=rstp fast-forward=no igmp-snooping=no
auto-mac=yes ageing-time=5m priority=0x8000 max-message-age=20s forward-delay=15s transmit-hold-count=6 vlan-filtering=no dhcp-snooping=no
What rule I have to add to firewall to allow me to connect to LAN devices from ipsec client?