Hello Team, I hope you are all fin.

I have some problem with my Ipsec vpn between multiple sites. my 5 sites are connected with same ISP through MIKROTIOK ROUTER IPSEC TUNNEL. sites are a,b,c,d,e. a site is my head office and b,c,d,e sites is my clients(branches). all clients are connected with head office (a) through ipsec tunnel and working properly.But problem is that (b) not connected to (c,d,e) and (c) not connected to (b,d,e) and (d) not connected to (b,c,e) and (e) not connected to (b,c,d). Other words is (b,c,d,e) are not connected to eachother. All sites have different subnets.
Kindly give me some help that what i do work on my head office mikrotik router (a).

Although i was add subnet on routes opetion of my branches. but issed are same.


Regards
Sohaib
Network Admin

Did you find a solution ?

Routing on ipsec is overly complicated and not intuitive.

You need separate policy entries for all the remote subnets or a supernet policy, in order to tell the ipsec engine what the "interesting traffic" so that it will route thru the tunnel.

And don't forget the nat bypass rules so the remote network traffic doesn't get nat'd.