IPSEC Tunnel to asa

RouterOS General
1

I have multiple cisco rv style firewalls at remote sites utilizing ipsec tunnels to our asa firewall that are successfully established. I am struggling w/ placing a routerboard at a remote location. I got to the point I placed a cisco rv in this location to test utilizing the same phase 1 & 2 settings to test and the tunnel established successfully.

My question is if this could possibly be from the nat settings. Central network is 192.168.0.0/16 and remote is 192.168.88.0/24. I added these to the nat rules as accept. I followed the following article to attempt the configuration and everything matches. (https://mum.mikrotik.com/presentations/US15/godinichconsulting_mum.pdf).

2

The internal addresses have little to do with tunnel establishment. What helps understand what’s wrong is logging. Disable the peer representing the ASA, activate debug logging of IPsec by running /system logging add topics~ipsec,!packet, then run /log print follow-only file=ipsec-start where topics~“ipsec”. Enable the peer representing the ASA, wait 1 minute, break (Ctrl-C) the /log print …, download the file ipsec-start.txt, and start reading.