IPSEC Routing

RouterOS General
1

this is kinda hard to explain

we have True Private Network (TPN) connecting 8 offices together. The aggrigation point got moved from our home office to the ISP’s NOC. The home office no longer has a leg of the TPN entering the office, instead we are connecting to the NOC VIA IPSEC. I have established a connection to the noc but i cant get any ping replys from our branch offices. I asked the NOC if i should config a static route in my home office Mikrotik box to route all the trafic bound for the branch offices and they said no that the router should know. They are telling me that there may be a bug in mikrotik. This is my first experience with IPSEC and im not sure how routing should work. Shouldnt i have to set some type of static route?

So, i asked the noc to setup me a PPTP connection and all almost went well, Ofter setting up the PPTP connnection and adding the necessary static routes i cound ping my branch offices but the branch offices could not ping the home office network. I asked the NOC to look into the probable routing issue and they told me. "This is a limitation of pptp, its point to point, and not lan to lan. "

Are they BSing me? any thoughts?

Thank you

2

When you add an IPSEC Policy, it’s behaves like a route even though you will not see anything in the routing table. For example, if you add an IPSEC Policy matching traffic with source address 10.0.1.0/24 and destination address 10.0.2.0/24, then an implicit route table entry is created with network 10.0.2.0/24 with a “gateway” of the IPSEC partner as described in the policy.