Hi,
I have one question.
This are my settings for the IPsec Server.
/ip ipsec mode-config
set [ find default=yes ] name=request-only responder=no
/ip ipsec policy group
set [ find default=yes ] name=default
/ip ipsec profile
set [ find default=yes ] dh-group=modp2048,modp1024 dpd-interval=2m
dpd-maximum-failures=5 enc-algorithm=aes-256,aes-128,3des hash-algorithm=
sha1 lifetime=1d name=default nat-traversal=yes proposal-check=obey
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha256,sha1 disabled=no
enc-algorithms=aes-256-cbc,aes-128-cbc lifetime=30m name=default pfs-group=
none
/ip ipsec policy
set 0 disabled=no dst-address=::/0 group=default proposal=default protocol=all
src-address=::/0 template=yes
/ip ipsec settings
set xauth-use-radius=no
Now my friend told me that with this settings i get problems when I use it for a Side to Side Configuration.
The “IPsec Master” Router has a public IP address. Also one of my other side router has a public IP address.
The second “side” is behind NAT.
If im right this my settings are for are “RoadWarrior clients”
Does I get problems with the NAT if I send the network traffic through NAT device?
At the moment everything is working fine but I would like to understand the IPsec ![]()
Chris