General Information - MikroTik RouterOS v2.9 Reference Manual

out-accept-isakmp: 0
in-accept-isakmp: 0
in-drop-encrypted-expected: 0
[admin@WiFi] ip ipsec>

General Information

MikroTik Router to MikroTik Router
• transport mode example using ESP with automatic keying
• for Router1
[admin@Router1] > ip ipsec policy add sa-src-address=1.0.0.1 sa-dst-address=1.0.0.2 \
\... action=encrypt
[admin@Router1] > ip ipsec peer add address=1.0.0.2 \
\... secret="gvejimezyfopmekun"
• for Router2
[admin@Router2] > ip ipsec policy add sa-src-address=1.0.0.2 sa-dst-address=1.0.0.1 \
\... action=encrypt
[admin@Router2] > ip ipsec peer add address=1.0.0.1 \
\... secret="gvejimezyfopmekun"
• transport mode example using ESP with automatic keying and automatic policy generating on
Router 1 and static policy on Router 2
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
out-drop: 0
out-encrypt: 7
in-accept: 12
in-drop: 0
in-decrypted: 7
Page 313 of 695