hi, i have 2 mikrotiks and i need connection between 2 Routers:
one RB1100Dx4 with v6.46.3 (stable)
and the other: 1100AHx2 v6.46.4 (stable)

i have this conf in ipsec

/ip ipsec profile
add name=profile1 nat-traversal=no
/ip ipsec peer
add address=1.1.1.1 name=peer1 profile=profile1
/ip ipsec proposal
add auth-algorithms=sha1,md5 enc-algorithms=3des name=proposal1
/ip ipsec identity
add peer=peer1 secret="pass123"
/ip ipsec policy
set 0 disabled=yes
/ip ipsec policy
set 0 disabled=yes
add dst-address=192.168.2.0/24 peer=peer1 proposal=proposal1 sa-dst-address=2.2.2.2 sa-src-address=0.0.0.0 src-address=192.168.0.0/23 tunnel=yes


cant see the problem, i see in active peers but dont have traffic

"no phase 2" say in ph2 state, im reading the manual but cant solve this

thanks

already check the nat and filters, i dont know what its going on, both wans have static ip publics

Looks like your sa-src-address should be 1.1.1.1, not 0.0.0.0

Looks like your sa-src-address should be 1.1.1.1, not 0.0.0.0

Hi tberg, thanks

that ip: sa-src-address its the status of the policies, change when i modify the peer, in local addres, but my local address is my LAN (192.168.0.1/23), i need the static ip?

anyway i try both and no changes, i will keep trying

well, i put wan in lan and lan in wan

the second time that i read the manual i understand that