Page 1 of 1

IPsec TUnnel Connecting - but no no traffic through VPN

Posted: Tue Mar 08, 2016 9:41 am
by Peque
Hi forum
I Playing around and trying to make a VPN tunnel From A Mikrotik HeX to a Westermo Lynx.
I'm actually able to get the VPN connection successfully - but cannot send or ping through the VPN - so my guess is a missing Route or some firewall rules - and that where I'm needing your help.
My setup is actually quite default and having a working VPN connection.

Mikrotik - LAN 192.168.88.0/24 WAN 78.111.168.206
Westermo Lynx LAN 192.168.0.0/24 WAN 78.111.168.205
The tunnel address should be 192.168.2.0/24

I've created a little drawing of the setup:
IPsec VPN.png

What am I missing here for getting the traffic through the tunnel ?
Firewall Fillter = Accept chain input from source 192.168.2.0/24
Firewall NAT = Action Src-nat to 192.168.2.0/24 - Chain src-nat - out-interface ether1(WAN)

What am I missing here
Thanks in advance
P

Re: IPsec TUnnel Connecting - but no no traffic through VPN

Posted: Tue Mar 08, 2016 10:03 am
by mrz
Look at this site to site example in the manual
http://wiki.mikrotik.com/wiki/Manual:IP ... Sec_Tunnel

Pay attention to what rule should be added in NAT (if you have masquerade configured).

Also not a Lynx expert, but shouldn't local subnet and remote subnet addresses should be 192.168.x.0/24 instead of 192.168.x.1/24?

Re: IPsec TUnnel Connecting - but no no traffic through VPN

Posted: Tue Mar 08, 2016 1:04 pm
by Peque
Thanks for the link
Allthough I'm still having some troubles.
I can now ping from 192.168.88.0/24 through 192.168.2.0/24 to Lynx internal network
Can access a webpage etc - but cannot access remote desktop (RDP) Internal connection error (works fine from lynx LAN)

But cannot ping from Lynx network 192.168.0.0/24 through the VPN .
Not sure where this problem is in my setup.