SOLVED (almost)
Hi,
well, the thing about the routes I mentioned in previous post got me thinking... why there is pref-src=""? (in my translation Mikrotik is saying I don't know which source to use... so there must be more than one...)
Well, it turns out that turning off the ipsec at Site 3 side was not enough. I still had active IPSEC policies at Site 1, and despite the ipsec tunnel being down, the router saw 2 possible options for reaching 10.201.3.0/24 subnet and obviously was choosing the ipsec one to use...
Once I disabled ipsec at both sides, I get the connection from Site 3 to Site 1.
What does not work is from Site 1 to Site 3 clients, but (a) it is not a priority; (b) I will play with configs later as I have to go now. If I don't succeed, I will be back here![Very Happy :D]()
Big thanks for your help nevertheless!
Cheers,
B.
Hi,
well, the thing about the routes I mentioned in previous post got me thinking... why there is pref-src=""? (in my translation Mikrotik is saying I don't know which source to use... so there must be more than one...)
Well, it turns out that turning off the ipsec at Site 3 side was not enough. I still had active IPSEC policies at Site 1, and despite the ipsec tunnel being down, the router saw 2 possible options for reaching 10.201.3.0/24 subnet and obviously was choosing the ipsec one to use...
Once I disabled ipsec at both sides, I get the connection from Site 3 to Site 1.
What does not work is from Site 1 to Site 3 clients, but (a) it is not a priority; (b) I will play with configs later as I have to go now. If I don't succeed, I will be back here

Big thanks for your help nevertheless!
Cheers,
B.
Statistics: Posted by BrandonSk — Sun Feb 11, 2024 5:32 pm