Community discussions

MikroTik App
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1275
Joined: Tue Jun 23, 2015 2:35 pm

[ASK] IPsec mode-config

Mon Nov 12, 2018 11:15 am

I got one question about IPsec.

"/ip ipsec mode-config static-dns or system-dns."

Basically means if other side has restriction like openDNS for some website with static-dns and system-dns we avoid restriction.

Thanks
 
User avatar
emils
Forum Veteran
Forum Veteran
Posts: 906
Joined: Thu Dec 11, 2014 8:53 am

Re: [ASK] IPsec mode-config

Mon Nov 12, 2018 3:35 pm

Static-dns and system-dns just informs the client/initiator what DNS servers should be used when tunnel is established. If the client reaches these DNS servers over the tunnel (DNS servers are within IPsec traffic selectors/policies), then obviously DNS traffic will be sent over the tunnel and will bypass any DNS restrictions set by internet provider.
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1275
Joined: Tue Jun 23, 2015 2:35 pm

Re: [ASK] IPsec mode-config

Mon Nov 12, 2018 9:47 pm

In my case doesn’t go. On my PC I’m using free Shrew Client ( i found on free version doesn't include the Split DNS feature), but also from iPhone i got same result.


Thanks
 
User avatar
nichky
Forum Guru
Forum Guru
Topic Author
Posts: 1275
Joined: Tue Jun 23, 2015 2:35 pm

Re: [ASK] IPsec mode-config

Tue Nov 13, 2018 8:59 am

From now it starts to work, i didn't change the configuration.I was pretty sure that i'm on correct way, just i was i wanted to double check with you guys.

It Works!!!!

Who is online

Users browsing this forum: Ahrefs [Bot], coffee1978, DanMos79, EsaqzpHot, Google [Bot], GoogleOther [Bot] and 59 guests