Passive parameter in IPsec->Peer

RouterOS Scripting
1

Good afternoon,

I’m using Mikrotik’s chr-6.48.3 version to make a script that creates a site-to-site IPsec tunnel. Whenever I run the command “ip ipsec peer add passive=no” via script or console the parameter “passive” is set to “yes” instead of “no”.
Has anyone had this problem? Is there any solution to solve the problem?

Any help, I appreciate it.

Compliments,
Daniel Rodrigues

2

passive=no is the default, no need to pass that in your command!

3

Good afternoon pe1chl,

I’ve tried it without passing the “passive” argument in the command and the behavior is the same.

4

Good afternoon,

Problem solved. It is necessary in the script to specify the peer address.