IPSEC Traffic Flow

RouterOS General
1

We have a senerio as follows;

Client Side

Have some machines that need to connect to the server side of the IP SEC on port 8288 (web server) but the traffic is going to the server and it seem to not know how to return.

Trace route from the client side lands on the server but when running a trace route from the server side back to the client it cant route… all other traffic is flowing and fine across the site to site.

Any suggestions?

2

Any details? Start from posting the configuration from both ends, concerns regarding privacy are addressed in my automatic signature below.

3

Three thing you have to have for your case:

  • Crrect Configuration
  • Enough Bandwidth
  • RouterOS which supported ipsec acceleration

I can’t tell you more according your post.

4

I suspect your problem is due to what I call “The lazy mans” routing, i.e. NATing, packets are being src NATed one direction and gets to destination and back, but from destination routing is failing.

But as per @sindy, very difficult to say exactly where problem is without more info