VPN ike2 cannot ping lan

Hi,

i have configured an ike2 vpn trought my laptop e my office. VPN is connected, i can ping lan ip of mikrotik but i can’t ping devices behind it.
I have windows 10 on my laptop.

Best regards.

There are many things which may go wrong here. If you’ve configured the Windows side in such a way that the VPN interface becomes the default gateway for the Windows once the tunnel gets up (which is the default behaviour of the Windows’ native VPN client), the reason why you cannot get to devices in Mikrotik’s LAN is your Mikrotik firewall configuration. Bear in mind that plain IPsec doesn’t create any interface, so the in-interface of the IPsec transports packets and the payload ones decrypted and decapsulated from the transport ones is the same. So if your RouterOS firewall is dropping all packets which came in via WAN, it drops also the IPsec payload ones. Follow the suggestion in my automatic signature to get a more specific advice.

Also, the devices in the LAN may have their own firewalls which prevent them from responding the pings, either completely or only if the ping requests comes from another subnet than the LAN one.