Hello!!!
I have two mikrotik routers: RB4011 iGS (LAN 100.10.1.0) and CCR1016 - 12G (LAN 10.0.0.0). I do IPSec Site to Site tunnel connection and it works fine. I need to netmap on CCR1016 LAN 10.0.0.0 to address 10.5.0.0, because LAN 10.0.0.0 is reserved to another network .
When I add Firewall rules on CCR1016:
rule0 /ip firewall nat chain=dstnat dst-address=10.5.0.0/24 src-address=100.10.1.0/24 action=netmap to-addresses=10.0.0.0/24
rule1 /ip firewall nat chain=srcnat dst-address=100.10.1.0/24 src-address=10.5.0.0/24 action=netmap to-addresses=10.0.0.0/24
I have log information: ‘failed to pre-process ph2 packet’ and ‘ipsec:input:in:ether1 out: (unknown 0)…’.
Am I missing something?
Help please!!!