I spent a couple of sleepless nights trying to make IPIP work with Azure gateway, and no success. Would appreciate if you find a way to make it work...

As i found, the issue with Azure Gateway is it requires Tunnel mode and does not work in transport IPsec mode.

To have fully functional BGP over IPSec tunnel, you need the support of Route-based IPSec, or as others called it VTI. With VTI, you have a dedicated interface for IPSec tunnel, and policy is set to allow any to any within this tunnel, and then you manage your traffic on the route level, instead of ...

I always thought I need to open incoming ports like UDP500, UDP4500 and ESP protocol to allow IPsec tunnels to work. I'm configuring a new router now, latest RouterOS, default configuration, just configured IPsec peers and policies... And see what tunnels are working without any additional filter ru...

Please provide the ETA for ROS v7. IKEv2 is critically needed.

+1

IKEv2 is necessary to connect local net to Azure with dynamic routing. I hoped to recommend my customers Mikrotik, but 3 years past, it not supports IKEv2.

Is it possible to crate policies for communication between 1 and 3? Yes, it's possible. I've tried to enable Generate Policy feture in IPsec Peers options. Don't use "Generate policy" option here, it is not needed in your case. I remember myself replying to a similar question some time ag...

I have a setup like this Network 1 <IPSEC TUNNEL> Network 2 <IPSEC TUNNEL> Network 3 RB750GL is in network 2. I can communicate between Net 1 and Net 2, Net 2 and Net 3. But no communication between Net 1 and Net 3? Is it possible to crate policies for communication between 1 and 3? I've tried to en...

UP!

Microsoft HTTP listener and TMG are able to multipleх SSTP and HTTPS connections, so one socket IP:443 with single certificate can be used to listen to SSTP connections and service HTTPS Web requests. TMG can even publish another sites with listener used for SSTP. Is RouterOS able to multiplex SSTP ...