I have a customer with a CRS125-24G-1S that needed a VPN tunnel to another site using a Cisco ASA 5508. I built the VPN & have good phase 2 connectivity. I probably watched 20 videos on the steps & found a NAT is needed for src with the local/remote IP’s, set to accept. Moved it to the top of the list. Traffic still does not reach destination at Mikrotik site. Just to be sure it wasnt the ASA, i opened a ticket with Cisco & showed them that when sending packets from ASA site to Mikrotik, the encapsulated packets increment. But nothing is returned. Cisco says the issue is on the Mikrotik side, which i would agree with. When i try to ping from the server on Mikrotik side back to ASA, i never see any received packets on the ASA, & there is no indication the packets are being put in the tunnel.
What else would i need to check in the Mikrotik? The customer has a pretty basic setup, so doent know much about VPN’s, NAT, etc. I am familiar with Cisco & Juniper, but based on everything i have watched, it seems like my config should work.
Resolved.
Customer had misconfiguration on server. Not sure of the issue because they could ping gateway entire time, but none the less the firewall router config was correct.