I am attempting to complete a tunnel between a Mikrotik device and a Cisco IOS router. The tunnel is up but traffic does not pass from either side. I am not very familiar with Mikrotik but the cisco side is configured properly.
In the statistics of the tunnel from the cisco side, I see the router encrypting traffic, but the other side (Mikrotik) is not decrypting traffic. Further, when I try to look at statistics on the Mikrotik side, they are all 0.
Please advise.
This is my Mikrotik configuration:
Flags: X - disabled
0 address=1.1.1.1/32 local-address=0.0.0.0 passive=no port=500
auth-method=pre-shared-key secret=“141Township” generate-policy=no
exchange-mode=main send-initial-contact=yes nat-traversal=no
proposal-check=obey hash-algorithm=sha1 enc-algorithm=3des
dh-group=modp1536 lifetime=1d lifebytes=0 dpd-interval=2m
dpd-maximum-failures=5
[admin@Router1] /ip ipsec proposal> print
Flags: X - disabled, * - default
0 * name=“default” auth-algorithms=md5 enc-algorithms=des lifetime=30m
pfs-group=modp1024
1 name=“141Township” auth-algorithms=sha1 enc-algorithms=3des lifetime=30m
pfs-group=modp1536
[admin@Router1] /ip ipsec proposal>
[admin@Router1] /ip ipsec policy> print
Flags: T - template, X - disabled, D - dynamic, I - inactive
0 src-address=10.0.1.0/24 src-port=any dst-address=10.0.16.0/24 dst-port=any
protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes
sa-src-address=2.2.2.2 sa-dst-address=1.1.1.1
proposal=141Township priority=0
[admin@Router1] /ip ipsec policy>