IPsec routing problem

Dear All,

I have an established IPsec vpn between a Mikrotik and a Watchguard router but there is no route / traffic inside the tunnel (phase1 Exchange mode IKE2)

I have used this article

https://www.watchguard.com/help/docs/help-center/en-US/Content/Integration-Guides/General/Mikrotik VPN_firebox.html

Mikrotik config

ether1 is a wan port and connect to internet via PPPoE

I want to connect from a local subnet (192.168.x.x ) which is configured on bridge1 (ether2,ether3) to remote subnet on Watchguard (192.168.y.y). On watchguard side we have many working IPsec tunnel and I see traffic to Mikrotik but on Mikrotik there is no any send or receive traffic back to Watchguard. (Anyway I have a working IPsec on Watchguard from an other Mikrotik but the working Mikrotik is behind a NAT network and there is no ether1 with PPPoE, from there the local subnet is also a brigde so maybe the problem on the not working Mikrotik the routing from bridge via ether1 (PPPoE)…

Does anybody any idea what should I do?

Thanks in advance
MikrotikfwNAT.PNG
MikrotikFWrules.PNG
MikrotikestablishedIPsec.PNG

I have changed phase1 exchange mode from IKEv2 to IKEv1 aggressive mode and it is working…, maybe there is a problem with PPPoE?