ipsec vpn and nat

RouterOS General
1

I am using routerOS at my house as a home router/firewall (point A). i have configured an ipsec vpn connection to tunnel traffic to another firewall (point B) across the internet. at my house I am using NAT and have several computers behind the mikrotik.


the NATed subnet of point A is 192.168.0.0 and the NATed subnet of point B is 10.1.1.0

I am able to ping and establish tcp connections from 10.1.1.0 to 192.168.0.0, but I cannot establish connections from 192.168.0.0 to 10.1.1.0.

I am pretty confident there is not a misconfiguration setting at point B as I have 5 other ipsec VPNs already setup and running fine. one of which is another mikrotik routeros box, the only difference on that box is that it is not using NAT.


any help would be appreciated!!

thanks,
ryan

2

Turn on Proxy ARP.

3

it looks like proxy arp is already being setup dynamically. anything else it could be?

4

NAT-T is not supported.

Regards

Andrew