Community discussions

MikroTik App
 
Peque
newbie
Topic Author
Posts: 45
Joined: Mon Oct 26, 2015 9:35 am

IPsec TUnnel Connecting - but no no traffic through VPN

Tue Mar 08, 2016 9:41 am

Hi forum
I Playing around and trying to make a VPN tunnel From A Mikrotik HeX to a Westermo Lynx.
I'm actually able to get the VPN connection successfully - but cannot send or ping through the VPN - so my guess is a missing Route or some firewall rules - and that where I'm needing your help.
My setup is actually quite default and having a working VPN connection.

Mikrotik - LAN 192.168.88.0/24 WAN 78.111.168.206
Westermo Lynx LAN 192.168.0.0/24 WAN 78.111.168.205
The tunnel address should be 192.168.2.0/24

I've created a little drawing of the setup:
IPsec VPN.png

What am I missing here for getting the traffic through the tunnel ?
Firewall Fillter = Accept chain input from source 192.168.2.0/24
Firewall NAT = Action Src-nat to 192.168.2.0/24 - Chain src-nat - out-interface ether1(WAN)

What am I missing here
Thanks in advance
P
You do not have the required permissions to view the files attached to this post.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7197
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: IPsec TUnnel Connecting - but no no traffic through VPN

Tue Mar 08, 2016 10:03 am

Look at this site to site example in the manual
http://wiki.mikrotik.com/wiki/Manual:IP ... Sec_Tunnel

Pay attention to what rule should be added in NAT (if you have masquerade configured).

Also not a Lynx expert, but shouldn't local subnet and remote subnet addresses should be 192.168.x.0/24 instead of 192.168.x.1/24?
 
Peque
newbie
Topic Author
Posts: 45
Joined: Mon Oct 26, 2015 9:35 am

Re: IPsec TUnnel Connecting - but no no traffic through VPN

Tue Mar 08, 2016 1:04 pm

Thanks for the link
Allthough I'm still having some troubles.
I can now ping from 192.168.88.0/24 through 192.168.2.0/24 to Lynx internal network
Can access a webpage etc - but cannot access remote desktop (RDP) Internal connection error (works fine from lynx LAN)

But cannot ping from Lynx network 192.168.0.0/24 through the VPN .
Not sure where this problem is in my setup.