Community discussions

MikroTik App
 
ctodd
just joined
Topic Author
Posts: 1
Joined: Thu Mar 08, 2018 10:50 pm

IPSEC Symmetric Routing

Thu Mar 08, 2018 10:56 pm

We have an IPSEC VPN tunnel established between two Mikrotik routers.

Site A: 192.168.0.0/24 (IPSEC Client with 10.0.0.xxx client IP addr)
Site B: 10.0.0.0/24 (IPSEC Server with static 10.0.0.xxx IP addr)

From Site A we are able to access all servers in Site B with no problems.

From Site B we are unable to access any servers in Site A.

I believe this is due to a missing route on the Site B router. I tried adding a static route for 192.168.1.0/24 via the VPN interface, but traceroute report !H no route to host.

I've searched for solutions, but all available information covers different network/device scenarios. Any assistance is much appreciated.
 
almdandi
newbie
Posts: 46
Joined: Sun May 03, 2015 5:22 pm

Re: IPSEC Symmetric Routing

Fri Mar 09, 2018 2:00 pm

I'm a littlebit confused what you trying to achieve and what your setup is. Maybe a config export (export compact hide-sensitive) would be helpful.

If i understand you correctly, you want that site A (192.168.0.0/24) and site B (10.0.0.0/24) can access each other. For that i would use a IPSec Site 2 Site Tunnel. The example in the wiki assume that both site have a static publiecly accessable ip address but there are ways around is. The last point (NAT and Fasttrack Bypass) in the example is very important. If you don't do that, the tunnel will establish but no traffic will travel through it.

Who is online

Users browsing this forum: stefki and 14 guests