warrenbonn, I had this headache just last month. It took me 2 weeks to solve this. Question, is your client with CISCO behind a NAT? That would be the first question. Check here, look for IPSec Tunnel – IPSec – Mikrotik to Cisco Router http://gregsowell.com/?p=1290 It would also help if you can post...

Problem solved! Thanks guys. I went ahead and assigned a public IP address for this instead.

Thanks guys. I missed your post about static NAT. This isn't a feasible option for us since we have NAT overload here.

Regarding on the NAT T enabled on remote site, it will be controlled by our client. I guess we will set this up as public IP instead. No router this time.

IPIP uses ip-encap protocol (4)

Hi Chupaka, I've been wrestling with this for 5 days now. I hope that you can help me out. How do I tell CISCO router to forward ip-encap protocol to my Mikrotik inside the network with a private IP of 192.168.230.246?

I'm posting a new issue just for this please. I'm trying to set up an IPIP tunnel, as basic one. I used the link: http://wiki.mikrotik.com/wiki/Manual:Interface/IPIP But our set up is different since it is behind a CISCO router and the tutorial is for public to public IP. Our set up is this: RouterO...

Assuming that this is still unanswered, I think this is a common issue with tunnel. Where inside network in Network A cannot ping the inside network in Network B.

You need to tell your MTK, on to exclude those private IPs in masquerading.

Thanks Gesha. 1. I ran this tool the CISCO router. ip nat inside source static udp 192.168.230.246 4500 interface FastEthernet3/0 4500 2. At Peer, I have NAT Traversal set to no. 0 ;;; RouterOS address=10.1.0.21/32 passive=no port=500 auth-method=pre-shared-key secret="SOMEPASSWORD" genera...

I think I got the problem but not the solution yet. The IPIP tunnel is not working yet. RouterOS --- CISCO ---- Internet(IPSEC) ----- Mikrotik RouterOS: LAN: 192.168.8.1 WAN: 192.168.230.246(yes this is still private) CISCO: LAN:192.168.230.1 WAN:x.x.x.x (some public IP) RouterOS: I assigned 10.1.0....

+1 karma. I got this resolved already. Thank you!

If there is only one ipip tunnelling device behind nat you simple pass all Pakets with protocol=4 to the MT box behind NAT. The other MT uses the NAT-Address as peer. Sorry to bump this up but when you say pass all Pakets with protocol=4, do you mean that we simply port forward TCP port #4 to the l...

Guys, I need your help here please. What I'm trying to do is to set up an IPSEC tunnel from a RouterOS behind a Cisco Router(NAT?) but I can't seem to get this to work. Set up is like this. RouterOS --- CISCO ---- Internet(IPSEC) ----- Mikrotik RouterOS: LAN: 192.168.8.1 WAN: 192.168.230.246(yes thi...

I'll answer my own question. Create an account, login, then go to account tab. DO NOT use an old browser version. I used an old Chrome and it didn't show up the details under Overview tab.

You just need to click Make a Demo Key and it worked! Thanks.

Hi. I am trying to set up a free version for testing. I have successfully installed this. But when I checked the license, it only says I am at level 0. How do I obtain level 1? I see no documentation about this. http://img202.imageshack.us/img202/6347/6ogu.jpg My question is how do I go obtain the f...