C
C
Cyril2017-05-25 11:34:12
Mikrotik
Cyril, 2017-05-25 11:34:12

What needs to be done for CISCO to see the subnet?

An IPSec tunnel has been raised between Mikrotik and CISCO. The subnet on the Mikrotik side is 192.168.100.0/24 , and the subnet on the CISCO side is 192.168.200.0/24 . Both networks are perfectly accessible to each other and there are no problems, everyone can ping each other.
On the Mikrotik side, there is another subnet 192.168.77.0/24 . How can I make this subnet visible to CISCO through a raised IPSec tunnel? That is, so that people from the CISCO side can open and ping computers on the 192.168.77.0/24 subnet ?
On Mikrotik, I registered only one more additional policy:

add dst-address=192.168.200.0/24 level=unique priority=1 proposal=my_proposal \
sa-dst-address=xxx.xxx.xxx.xxx sa-src-address=yyy.yyy.yyy.yyy \
src-address=192.168.77.0/24 tunnel=yes

From the CISCO side, I registered only a static route, indicating Mikrotik as a remote gateway ( 192.168.77.254 )
route LAN 192.168.77.0 255.255.255.0 192.168.77.254

But so far it hasn't worked. What else needs to be registered from the side of CISCO / Mikrotik, so that two subnets can be seen at once through one IPSec tunnel of Tsiske ( 192.168 . Thank you!

Answer the question

In order to leave comments, you need to log in

1 answer(s)
D
Dmitry Tallmange, 2017-05-25
@p00h

The gateway address on the cisco must be the same as for the 192.168.100.0/24 subnet. Your gateway address is 192.168.77.254, the tsiska knows nothing about it, none of its interfaces has an address in this subnet.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question