Community discussions

MikroTik App
 
User avatar
zeeh1975
just joined
Topic Author
Posts: 7
Joined: Mon Apr 19, 2021 8:17 pm

Multiple encrypted ends in a IPSEC Tunnel

Thu Jul 01, 2021 4:17 pm

We are migrating from a Cisco ASA to a Mikrotik CHR (Router OS 6.47.9), we managed to configure VPN with no troubles. But now we face a problem, we had to configure a VPN with multiple encripted ends, in Cisco ASA I can put them in a comma list, but in Mikrotik I don't know how to solve this.
I've tried to put space or "," or ";" as separator but seems no to accept more than one address on "Dst. Address" in policy, also tried to create another policy with same "Src. Address" and other "Dst. Address", but when we add the policy (in winbox) "Src. Address" get automatically modified to "::/0".
Any idea on how to set multiple encripted ends on a IPSEC tunnel?
Any help would be appreciated
Thanks in advance

p.s. English is not my born language so forguive any typo or grammatic error.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12003
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Multiple encrypted ends in a IPSEC Tunnel

Thu Jul 01, 2021 4:20 pm

simply put one policy for dst-address
src-address is modified automatically accordingly to peer
 
User avatar
zeeh1975
just joined
Topic Author
Posts: 7
Joined: Mon Apr 19, 2021 8:17 pm

Re: Multiple encrypted ends in a IPSEC Tunnel

Thu Jul 01, 2021 4:53 pm

simply put one policy for dst-address
src-address is modified automatically accordingly to peer
I don't get you, if I ommit src. address how router determine where to send tunnel packets?
Also, what if I had multiple ends also in my side?
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12003
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Multiple encrypted ends in a IPSEC Tunnel

Thu Jul 01, 2021 5:25 pm

Who is online

Users browsing this forum: Ahrefs [Bot], eworm, glushkoo, woland and 108 guests