How to make src-nat in esp tunnel on mikrotik?

Question

open server

Hello!
Such a story was such a tunnel 192.168.0.0/24 <-> 1.1.1.1 <-> 2.2.2.2 <-> 192.168.1.0/24
Ip addresses in networks 192.168.0.1 and 192.168.1.1 respectively.
The src-nat rules include ipsec-policy=out,none both here and there.
So I needed to send one machine 192.168.0.9/24 to the Internet via ip 2.2.2.2.
I thought it was easy, I did in the mangle add src=192.168.0.9 mark routing=to-sec-office,
/ip route add distance=1 gateway=192.168.1.1 routing-mark=to-sec-office
But no, 192.168.1.1 unreachable

What am I missing?

Answer 1

Error on the server "Disable the use of HOSTS". How to do it?