I have some problems with creation ipsec tunnel between Microtik and Cisco
I suceffully configure ipsec policies and peer. But other side, where is Cisco require what i must connect with address 10.254.xx.xx, but ipsec connects by my real external address.
Where and how can i introduce 10.254 address ?
Can anybody help me resolve this issue ?
Mikrotiks logs:
14:21:40 ipsec initiate new phase 1 negotiation: xx.xx.xx.xx[500]<=>xx.xx.xx.xx
[500]
14:21:40 ipsec begin Identity Protection mode.
14:21:40 ipsec received broken Microsoft ID: FRAGMENTATION
14:21:40 ipsec ISAKMP-SA deleted xx.xx.xx.xx[500]-xx.xx.xx.xx[500] spi:dbb13da6
6dc01eb7:a389eb235b7b5766
14:21:40 ipsec received Vendor ID: CISCO-UNITY
14:21:40 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
14:21:41 ipsec received Vendor ID: DPD
14:21:41 ipsec ISAKMP-SA established xx.xx.xx.xx[500]-xx.xx.xx.xx[500] spi:dcd7
d48ff61419fb:46b95a6a1f48156b
14:21:41 ipsec initiate new phase 2 negotiation: xx.xx.xx.xx[500]<=>xx.xx.xx.xx
[500]
14:21:41 ipsec ISAKMP-SA expired 8xx.xx.xx.xx[500]-xx.xx.xx.xx[500] spi:dcd7d48f
f61419fb:46b95a6a1f48156b
14:22:11 ipsec xx.xx.xx.xx give up to get IPsec-SA due to time up to wait.
14:22:11 ipsec IPsec-SA expired: ESP/Tunnel xx.xx.xx.xx[0]->xx.xx.xx.xx[0] spi=
197497641(0xbc59329)
14:22:12 ipsec ISAKMP-SA deleted xx.xx.xx.xx[500]-xx.xx.xx.xx[500] spi:dcd7d48f
f61419fb:46b95a6a1f48156b