I have RouterOS device with this configuration:
1) Main
- RouterOS v6.49.15
- WAN Internet access with public and static IP xxx.xxx.xxx.xxx
- LAN network is 192.168.88.0/24
- IPSec with working tunnel to the slave configured as:
Code: Select all
peer=ike1-site2 tunnel=yes src-address=192.168.88.0/24 src-port=any dst-address=192.168.89.0/24 dst-port=any protocol=all action=encrypt level=require ipsec-protocols=esp sa-src-address=xxx.xxx.xxx.xxx sa-dst-address=yyy.yyy.yyy.yyy proposal=ike1-site2 ph2-count=2
2) Slave
- RouterOS v7.14.3
- WAN Internet access with public and static IP yyy.yyy.yyy.yyy
- LAN network is 192.168.89.0/24
- IPSec with working tunnel to the master configured as:
Code: Select all
peer=ike1-site1 tunnel=yes src-address=192.168.89.0/24 src-port=any dst-address=192.168.88.0/24 dst-port=any protocol=all action=encrypt level=require ipsec-protocols=esp sa-src-address=zzz.zzz.zzz.zzz sa-dst-address=xxx.xxx.xxx.xxx proposal=ike1-site2 ph2-count=2
the OpenVPN clients are able to connect to the main RouterOS and can communicate with the clients on the 192.168.88.0/24
I would also like the OpenVPN clients to communicate with the slave clients on the 192.168.89.0/24 network.
Anyone have some hints ?
Thanks!