Questions with routing on bare ipsec?

Question

VPN

Hello everyone, I can’t figure out how to solve the problem.
There is a vpn connection on bare ipsec, Mikrotik is the passive side, the connection is established and everything is well routed FOR Mikrotik, but here he does not see the network behind vpn, there are no ipsec interfaces in the rout list. How to make him see the remote gateway?

Answer 1

add a rule to nat:

/ip firewall nat \
add action=accept chain=srcnat dst-address=192.168.55.0/24 src-address=192.168.66.0/24 place-before=0

Answer 2

On pure ipsec, you need to build a route through public addresses.
Just in case, prohibit non-ipsec traffic between nodes, so as not to let everything go through an open channel in case of an error in the ipsec configuration.