Hi!
I have RB1100 and RB3011, both runs 6.45.8 firmware. There is IPsec tunnel between them. I can ping RB1100 from RB3011, but can’t ping in other direction.
I created the firewall rule in 3011 to allow traffic from 10.10.88.0/24 and the rule in 1100 to allow traffic from 10.10.1.0/30.
RB1100:
/ip firewall filter add action=accept chain=input log=yes src-address=10.10.1.0/30
RB3011:
/ip firewall filter add action=accept chain=input log=yes src-address=10.10.88.0/24
I successfully pinging RB1100:
ping 10.10.88.1 interface=lo-bridge
SEQ HOST SIZE TTL TIME STATUS
0 10.10.88.1 56 64 0ms
1 10.10.88.1 56 64 0ms
2 10.10.88.1 56 64 0ms
sent=3 received=3 packet-loss=0% min-rtt=0ms avg-rtt=0ms max-rtt=0ms
But I can’t ping 10.10.1.1 from RB1100.
ping 10.10.1.1 interface=lo-bridge
SEQ HOST SIZE TTL TIME STATUS
0 10.10.1.1 timeout
1 10.10.1.1 timeout
2 10.10.1.1 timeout
sent=3 received=0 packet-loss=100%
Howether, when I try to ping 10.10.1.1 I see new records in log on 3011:
16:13:58 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
16:13:59 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
16:14:00 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
16:14:01 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
16:14:02 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
16:14:03 firewall,info input: in:ether10 out:(unknown 0), src-mac 74:4d:28:e2:cf:8e, proto ICMP (type 8, code 0), 10.10.88.1->10.10.1.1, len 56
Please, help me to configure my devices properly.