General Information

in-accept: 12
in-accept-isakmp: 0
in-drop: 0
in-decrypted: 7
in-drop-encrypted-expected: 0
[admin@WiFi] ip ipsec>
General Information
MikroTik Router to MikroTik Router
• transport mode example using ESP with automatic keying
• for Router1
[admin@Router1] > ip ipsec policy add sa-src=1.0.0.1 sa-dst=1.0.0.2 \
\... action=encrypt
[admin@Router1] > ip ipsec peer add address=1.0.0.2 \
\... secret="gvejimezyfopmekun"
• for Router2
[admin@Router2] > ip ipsec policy add sa-src=1.0.0.2 sa-dst=1.0.0.1 \
\... action=encrypt
[admin@Router2] > ip ipsec peer add address=1.0.0.1 \
\... secret="gvejimezyfopmekun"
• transport mode example using ESP with automatic keying and automatic policy generating on
Router 1 and static policy on Router 2
• for Router1
[admin@Router1] > ip ipsec peer add address=1.0.0.0/24 \
Page 232 of 568
Copyright 1999-2005, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.