hmmmm i also just noticed the policy with 10.3.3.0 as src-address and dst-address 10.0.0.0 is not be dynamically created.... I wonder why?

I still have no luck.... the only differences I see with my configuration and yours are: 1.) I am using AES-128 2.) The policies that are dynamically created are getting a /32 bit mask for src and dst subnets....which seems wrong to me. Check it out: [admin@MikroTik] /ip ipsec policy> print Flags: X...

I have not solved it, but thank you very much for the reply tmiklas!

I am going to check all my settings again and I will post back my findings...

First of all try to upgrade router to 2.9.40 version, use netinstall for it. Then check 'system license print' upgrable-to and release is showing there. If release is 3.x, then upgrade is possible without any additional fee (upload packages to FTP). If shown release is 2.9, you have to purchase new...

Hi all, I currently have license SW/L4 for version 2.9. I need to upgrade to 3.0beta to take advantage of the NAT-T feature. How do I go about upgrading? If I download the 3.0beta packages and FTP them to my router then I get an error that my license does not support the new version. I want to buy a...

computer(natted IP) <----> Mikrotik <---Internet----> Sonicwall <-----> computer(natted IP) Hi guys, I am trying to setup ipsec between my home and office. my home network is natted behind the Mikrotik (mikrotik is doing the nat). My office is natted behind a sonicwall (sonicwall is doing the nat). ...

it looks like proxy arp is already being setup dynamically. anything else it could be?

I am using routerOS at my house as a home router/firewall (point A). i have configured an ipsec vpn connection to tunnel traffic to another firewall (point B) across the internet. at my house I am using NAT and have several computers behind the mikrotik. the NATed subnet of point A is 192.168.0.0 an...