IPSec VPN Site-to-Site with source nat on initiator side

RouterOS General
1

Hi,

I need to create a IPSec VPN site-to-site with the following setup:

Mikrotik RB750G

Initiator Side (Local Peer)
Public IP: 1.1.1.1
Local Network: 192.168.0.0/24

Remote Peer
Public IP: 2.2.2.2
Local Network: 171.10.0.0/16

The problem is that I need to send my local address as 171.10.0.10/32 hiding my internal network.

I tried to src-nat 192.168.0.0/24 to 171.10.0.10/32 and creating a ipsec policy with src-address 171.10.0.10/32 but it didn`t work.

Any body could help me?

Thanks in advance.

2

http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Ipsec.2FL2TP_behind_NAT

Example is for L2tp over ipsec, but for site-to-site principle is the same.