Answer the question
In order to leave comments, you need to log in
What needs to be done for CISCO to see the subnet?
An IPSec tunnel has been raised between Mikrotik and CISCO. The subnet on the Mikrotik side is 192.168.100.0/24 , and the subnet on the CISCO side is 192.168.200.0/24 . Both networks are perfectly accessible to each other and there are no problems, everyone can ping each other.
On the Mikrotik side, there is another subnet 192.168.77.0/24 . How can I make this subnet visible to CISCO through a raised IPSec tunnel? That is, so that people from the CISCO side can open and ping computers on the 192.168.77.0/24 subnet ?
On Mikrotik, I registered only one more additional policy:
add dst-address=192.168.200.0/24 level=unique priority=1 proposal=my_proposal \
sa-dst-address=xxx.xxx.xxx.xxx sa-src-address=yyy.yyy.yyy.yyy \
src-address=192.168.77.0/24 tunnel=yes
route LAN 192.168.77.0 255.255.255.0 192.168.77.254
Answer the question
In order to leave comments, you need to log in
The gateway address on the cisco must be the same as for the 192.168.100.0/24 subnet. Your gateway address is 192.168.77.254, the tsiska knows nothing about it, none of its interfaces has an address in this subnet.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question