IPSec VPN over PPP USB 4G modem not working

Hello,

I’m new to the RouterOS, but I’m over the initial learning curve and managed to get most features working including IPSec VPN between the 951G-2HnD and a RV016 using the Ethernet port. I also got the Sierra Wireless AC320U 4G modem working over PPP.

What is not working is the IPSec VPN when roaming with the Mikrotik and using the AC320U. The installed SAs comes up normal. When I ping from the Mikrotik side, I see the “Current Bytes” counter increase value for the direction Mikrotik to RV016, but nothing the other way. Pinging from the RV082 does not increment the counters at all (not surprising).

My understanding is that the PPP interface is parallel with the Ethernet one, and the only change to switch should be to make sure that the PPP interface has a “drop” on in and and accept on “forward” in the firewall. Nothing should change for the NAT tab since the internal nets are the same regardless of Ethernet or PPP transport.

I doubt there is anything to change on the RV016 as it doesn’t care if the IP packets comes from an ethernet or 4G modem as long as there are IP addresses.

Finally, the test with the ethernet was done behind another router to simulate the NAT (port 4500) condition just to be sure.

Based upon my understanding of IPSec, I cannot see anything wrong switching interfaces for the transport. Could it be an MTU issue due to longer headers?

Per