Community discussions

MikroTik App
 
bibawa
newbie
Topic Author
Posts: 28
Joined: Mon Oct 29, 2012 11:25 pm

IPSEC VPN Behind Nat

Sun Oct 30, 2016 2:53 pm

Dear,

I'm trying to create a IPSEC vpn connection between 2 Mikrotik Devices:

--192.168.100.0/24--MIKROTIK -- 185.59.71.2 -------INTERNET ----- ISP MODEM (NAT APPLIED)-- 192.168.15.1 ----192.168.15.252---MIKROTIK --- 192.168.16.0/24 ---

So as you see one side of the part has a NATTED IP. When I look into the log files during the IPSEC setup I see in the log files "Phase 1 negotionation failed, couldn't find configuration"

xx bytes messages received from 185.59.71.2[500] to 192.168.15.252[500], so as you see the package is entering the MKT with it's natted IP as 'source'.

How do I need to change this? Can I rewrite that natted Ip back to it's WAN ip ?

with regards,
 
actrn
just joined
Posts: 6
Joined: Sat Oct 29, 2016 2:05 pm

Re: IPSEC VPN Behind Nat

Sun Oct 30, 2016 6:08 pm

try to put your rb client in another Natted Lan and see if work, probably issue with external double nat of client ISP.
 
User avatar
blajah
Member Candidate
Member Candidate
Posts: 222
Joined: Fri Jun 12, 2015 8:58 pm
Location: Belgrade, Serbia
Contact:

Re: IPSEC VPN Behind Nat

Tue Nov 01, 2016 5:39 pm

You should try NAT-T or read relevant issue here

http://forum.mikrotik.com/viewtopic.php?t=36676