Конфиг:
RouterOS 6.47.7
/ip ipsec mode-config
add address=172.16.193.254 address-prefix-length=32 name=cfgIvanov@mail.ru \
split-include=192.168.4.0/23 static-dns=172.16.193.1 system-dns=no
/ip ipsec policy group
add name=groupIke
/ip ipsec profile
add dh-group=modp2048,modp1536 enc-algorithm=aes-256,aes-192 hash-algorithm=\
sha256 name=profileIke
/ip ipsec peer
add exchange-mode=ike2 local-address=XXXXXXX name=peerIke passive=yes \
profile=profileIke
/ip ipsec proposal
add auth-algorithms=sha512,sha256 enc-algorithms=\
aes-256-cbc,aes-256-ctr,aes-256-gcm,aes-192-gcm lifetime=1h name=\
proposalIke pfs-group=none
