Community discussions

 
guglez
just joined
Topic Author
Posts: 5
Joined: Thu Dec 06, 2012 11:53 am

IPSec mikrotik-mikrotik and DNAT

Tue Mar 11, 2014 10:37 pm

Hi,

I have two mikrotik routers. One router has real IP address assigned directly to the router (as usual). Another router don't have a real IP assigned to it's interface. Instead of that the real IP is assigned via DNAT by our ISP. Is it possible to establish an IPSec tunnel for this configuration? I've tried but had no luck.
 
guglez
just joined
Topic Author
Posts: 5
Joined: Thu Dec 06, 2012 11:53 am

Re: IPSec mikrotik-mikrotik and DNAT

Thu May 22, 2014 12:32 pm

Bump

Отправлено с моего GT-N7100 через Tapatalk
 
leonset
Member Candidate
Member Candidate
Posts: 256
Joined: Wed Apr 01, 2009 9:09 pm

Re: IPSec mikrotik-mikrotik and DNAT

Tue May 27, 2014 5:16 pm

Try to use the internal IP address in the NAT'ed router ipsec policy. You will also need to put accept rules for ipsec traffic before your masquerade rule (if there's any in the ipsec router).

Something similar is explained here:
http://wiki.mikrotik.com/wiki/Manual:IP ... behind_NAT

Who is online

Users browsing this forum: No registered users and 110 guests