IPsec VPN - overlapping subnets

RouterOS General
1

Dear All!

Is it possible to create 2 tunnels for two peers with overlapped subnets?

For example,
Tunnel 1: my_net=>my_router<=>x.x.x.x<=10.1.1.0/24
Tunnel 2: my_net=>my_router<=>y.y.y.y<=10.0.0.0/8

I need to explain to my Mikrotik that the traffic to 10.1.1.0/24 should be sent through Tunnel 1 but all other traffic for 10.0.0.0/8 should be sent through Tunnel 2

I worked with Fortinet and Juniper devices previously - they create the special network interface for these tunnels and require the static route to dest. networks. So I may increase and decrease the metric of such routes to install the priority (I didn’t do it in fact but suppose it should work).

But Mikrotik has another ideology - no additional interfaces, no additional static routes, only IPsec policies and NAT options. So I didn’t find the way to solve this task.

Could you help me?

2

Did you test it? I think it should work.

3

Yes. Unfortunately it doesn’t work, Mikrotik send all the traffic to Tunnel 2 (including 10.1.1.0/24)