IPSEC Tunnel Configuration on MikroTik RouterOS v7

In this video, I will show you how to configure IPSEC on MikroTik RouterOS v7
#mikrotik #ipsec

[peterst.]

Thanks again for your videos, you deserve more subscribers and likes since you are a real network engineer and professional.

[MohamedAhmed-vwbc]

Thanks, you are the best in explaining Mikrotik

[controltech]

how to config router default over ipsec ?

[muhammaduzair]

For internet access for example from either routers to facebook do we need to configure simple Nat also like we do by applying masquerade in action and chain as source nat ?

[federicogomez]

Excelent video mate!, i do all what you explain on video but dont get ping, shows timeout... can help me please?

[yvindgravklev]

Hello sir. I`ve set up quite a few routers with Ipsec Tunnel. In RoS 6v i also used to set up a route in the main routing table (dst-addresse: x.x.x.x Gateway : bridge). This i did for the dude having a routing table to fetch its routes. However this is failing bigtime in RoS 7v. Instead of doing src-nat as a routing i`ve set up 2 "Raw" Prerouting rules with no track chain, 1 for each way. That also work as a charm. What you think about using Raw rules as Prerouting?

[antoniomax]

Android 12/13, mobile internet (nat) ipv4. How connect to mikrotik? Ipsek, ikev support?

[forex-chart-analysis-daily]

Sir if public ip change then we should be again and again configuration??

[jpcapobianco]

very interesting video, i've replicated in GNS. i've bought the course about vpn on the My Network Training, but IPSEC is little bit different, it'a a policy based vpn. we don't need routes but a security association in the first phase and a second proposal phase where we set the tunnel, and we don't have a specific tunnel address different from the local subnet that comunicates like the route based vpn.. i understand now why nat-t is important, becuse AH protocol duplicates the ip header in a new AH ip header. so nat creates a security problem. the only thing that i dont understand is the fact that before you se the nat masquered you need another rule for accept the traffic. maybe nat does not work this type of duplicated fields ?? i dont know... inyway i'm thinking to buy the entire course to study better.