I’m trying to set up a LAN to LAN IPSEC tunnel between a Draytek 2860 and a Hap ac3.
I already have a tunnel between the Draytek and a Fritzbox. I want to replace the Fritzbox with the Mikrotik Hap. Then I followed the guide there: https://www.draytek.com/support/knowledge-base/7472
Today the tunnel is between two networks known on the WAN by their FQDN. It is set up on each side of the tunnel. But I don’t see a way to specify a FQDN instead of a IPv4 address for the peer on the Mikrotik side.
Unless you have some very old RouterOS, “address” parameter in “/ip ipsec peer” accepts hostnames.
Indeed. My routeros is 7.1.5.
I tried to set a peer fqdn address with Passive mode. That doesn’t work.
The issue is much me having limited knowledge about VPN, then trying to adapt howtos found on internet for my purpose. And i’m new to Mikrotik products.
Thank you.
I found other ressources there: https://help.mikrotik.com/docs/display/ROS/IPsec#IPsec-Peers
Help is much more interresting than Wiki.