I'd be very happy with 200Mbps Cloud Core IPSEC performance

Does /ip ipsec statistics print show any notable counters ?

If your in-state-sequence-errors is high, i'm guessing a ROS issue. http://forum.mikrotik.com/viewtopic.php?f=2&t=94625

To rule out any other networking issues, i've configured a ipip tunnel. Test results from Lan to Wan (remote site): down [ 5] 0.0-60.1 sec 1.35 GBytes 194 Mbits/sec up [ 3] 0.0-60.0 sec 285 MBytes 39.8 Mbits/sec Which come really close the specs of the broadband internet connection (200/40). Back to...

To limit any issues caused by incompatibility between cisco and MT, i've bought another MT. Site1: CCR1009-8G-1S-1S Site2: CCR1009-8G-1S-1S+PC IPsec forwarding performance hasn't improved much. Average speeds of 5MB/sec with spikes up to 9MB/sec. Without VPN i'm able to generate a steady flow at 23M...

Well, it's not really an answer to your question, but the easy fix is by just adding a default route in the default routing table.

routing table A
0.0.0.0/0 -> ISP-A

routing table B
0.0.0.0/0 -> ISB-B

default routing table
0.0.0.0/0 -> ISB-A

the latter is being used for unmarked traffic

Does the server (10.0.0.51) have a route back to the router for subnet 192.168.100.0/24 (or a default route) ?

Is there a LAN firewall in place which could drop any return traffic ?

If i'm not mistaken you should be able to set a route for 0.0.0.0/0 in the routing table (not firewall) for all traffic originating from the router.

This week i've received my very first mikrotik router. The CCR1009-8G-1S-1S+PC, which i'd like to use to replace a cisco ASA5505. Configuring the CCR was quite easy, including different vlans, routing, firewall chains and ipsec, but the ipsec throughput is a bit disappointing. My cable connection sh...