Some time client needed Site-to-Site IPSec VPN connection between multiple locations but ware not ready to pay for Cisco routers.

So it was time to my favorite cheep but reliable solution Mikrotik. They didn’t need any special requirements, on the main location they had a server with a application and a on the other locations they had a few PC’s that needed to contact the database on that server.

If everything set up but in one day provider change external IP addresses.

Definitely you have to make some changes in the IPsec settings.

Lest fix it:
2 sites connected via IPsec.
One provider recently swap externel IP. How to establish channel back.

Find current external IPs of the both Mikrotik routers.
On both routers:

Go to: IP - IPSEC - Policies:
Edit faulty ipsec policy
check/change SA Src. Address
check/change SA Dst. Address

Go to: IP - IPSEC - Peers - edit peer:
check/change IP address of the peer.

Google AdSence

AUST IT - Computer help out of hours, when you need it most.

Find out why we do it for less.


AUST IT will help you resolve any technical support issues you are facing onsite or remotely via remote desktop 24/7. More...


Reservoir, Melbourne,
3073, VIC, Australia

Phone: 0422 348 882

This email address is being protected from spambots. You need JavaScript enabled to view it.

Sydney: 0481 837 077


Join us in social networks to be in touch.


Complete the form below, and we'll send you our emails with all the latest AUST IT news.