Happy to hear that !

To help you don't get drunk, I'll drink some beers too

I close the thread.

Hi,

I recently found the solution : on the Action tab of the IPSec Policy, set Level to 'unique' instead of 'require'

Tell me if it works in your case, I will the set the topic to SOLVED

Cheers

Here is my config : /ip ipsec proposal set [ find default=yes ] enc-algorithms=3des add auth-algorithms=md5,sha1 enc-algorithms=3des,aes-128-cbc lifetime=8h name="ipcop" pfs-group=modp1536 add enc-algorithms=3des lifetime=8h name=stonegate pfs-group=none /ip ipsec peer add address=83.206.1...

Hello, I set up a S2S VPN between Stonegate and Mikrotik LAN A1 10.160.1.0/24 ----> SG 83.206.1.10 oooooooo 41.188.22.44 MT <----- 192.168.193.0/24 LAN B1 LAN A2 172.20.0.0/23 | Mikrotik has srcnat accept for both A1 and A2 Most things work fine, IKE and IPSEC negotiate well and I can see 4 installe...