IPsec Tunnel and Cisco VPN client on an external host

RouterOS General
1

Hello.

I tried to establish an IPsec tunnel between a mikrotik rb2011 and a PC which it’s running cisco vpn client. But without success!

This is the configuration for the tunnel.

/ip ipsec mode-config address-pool=IPv4Pool system-dns=yes

IPv4Pool it’s the private pool for the LAN’s host and I want that the PC which connects through IPsec tunnel gets a Private LAN.

/ip ipsec user name=user1 password=123456




/ip ipsec peer address=0.0.0.0/0  auth-method=pre-shared-key enc-algorithm=aes-128 local-address=10.0.0.1 nat-traversal=yes secret=1236456

This local address is the router public IP or it’s the router private IP? I set the router private IP 10.0.0.1 and as the user it’s connected to a public network I set the address 0.0.0.0 for it.

/ip ipsec policy tunnel=yes sa-dst-address=:: sa-src-address=::

I set the default values for sa-dst-address and sa-dst-address buecause I don’t know what really means :: . It can be any IP? The other configuration for ipsec policy are set as default

/ip ipsec proposal

All default here.

So, I don’t know if the code it’s wrong or I can’t establish a connection with a PC using Cisco VPN client. Could you please helpme with this.

BR

2

Now, following Road Warrior description in the wiki documentation I made (watch that I don’t know the client public IP because it can connect everwhere):

/ip ipsec mode-config
add  address-pool=IPv4Poll name=RW-cfg system-dns=yes

/ip ipsec policy group
add name=RoadWarrior

/ip ipsec policy
add dst-address=10.0.0.0/24 group=RoadWarrior src-address=10.0.0.0/24 \
    template=yes
/ip ipsec user
add name=user1 password=123
add name=user2 password=234

/ip ipsec peer
add auth-method=pre-shared-key-xauth generate-policy=port-strict mode-config=RW-cfg \
    policy-template-group=RoadWarrior secret=123 passive=yes

But my doubt is that I want that the road warrior client gets the LAN private IP, so it’s right this line?

/ip ipsec policy
add dst-address=10.0.0.0/24 group=RoadWarrior src-address=10.0.0.0/24 \
    template=yes

It’s still not working.