Thanks for your help anyway, though I was really eager to see one or more refrence at least relating to the topic of this thread (ie. ipsec) in linux.

Hi @sindy, the explanation was both concise and clarifying but I have a major problem with this: where exactly this information come from? I am a network man working with popular network devices like cisco, Huawei, etc., but have not been able to find the basic knowledge needed to understand mikroti...

It seems everybody's problem been solved by setting "level" parameter to "require". But what does it really mean and on what occasion each and other options should be used? I read the description provided by mikrotik help and that was not helpful at all; like many other concepts ...

thanks for the clue deer @msatter , I searched the key words and found useful tips on this topic in the wiki: https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#:~:text=XAuth%20is%20used.-,Allow%20only%20IPsec%20encapsulated%20traffic,-There%20are%20some https://wiki.mikrotik.com/wiki/Manual:IP/Firewall...

Hi, I have a MK router with a working IPSec tunnel to a remote site. Some users within a particular source address list e.g. "EncryptedUsers" are defined in IPSec-->Mode Config and IPSec--> Identities to go through this tunnel. My question is: how can I prevent packets of those users from ...

as far as I among other folks on this topic have checked recursive route for the purpose of failover does not come along with PCC load balancing if two or more route marks are being used.

I want to thank both guys who contributed to progress this forum topic. You saved me (at least) an extra 3 days of searching (i.e. wasting time) and struggling to find my answers from weak, unreliable and incomplete sources. thank you men

Hi everybody, I wonder if UDP connections could be used in statefull firewall rules (at least checking connection state to be new). As far as I know established and related states and perhaps other ones are specific to TCP protocol but just read somewhere that UDP (and apparently TCP) connections co...