I create IPsec connection to multiply remote subnets but have some troubles with it.
Sometimes it works fine (see file "normal policy").
Sometimes some policies (one or several) become invalid (they become red in Winbox) and stop work (see files "invalid policy").
All policies are similar, attached to one peer and differ only in Dest. Address.

Why can it be? What is wrong?

HI,

I encountered the same problem. Did you find any solution?

I came across this post while trying to troubleshoot another issue. I know its been almost two months, but hopefully this will help someone in the future.

Whenever I have multiple subnets going to the same endpoint, on the first policy I set up encrypt, require, and tunnel, just like you did. However, on each subsequent policy that goes to the same endpoint, instead of require for the level, make it unique. This worked for me, anyway.