Questions about several IPsec on the same device

RouterOS General
1

Hello!

I can’t solve several tasks regarding VPNinin on Mikrotik.
I’m using RB2011 with v6.35.2. My network assume that I have several IPsec tunnels to remote offices and several inbound PPTP/L2TP connections from remote users. There is no any IP addresses overlaps.

  1. How can I ping from mikrotik itself to IPsec tunnel? It looks like Mikrotik don’t understand that it should pass the packet to the IPsec tunnel when originating from itself.

  2. How can I access from remote host with PPTP VPN to the remove network via IPsec? Looks like same issue as above.

  3. How can I access from one remote network (IPSec) to another remote network (IPSec)? Anything except correct network in IPsec policies and accept firewall rules?

Thanks!

2

There is a parameter “src-address” for ping command for you to test IpSec site to site connections without actual clients.

/ping X.X.X.X src-address=Y.Y.Y.Y