I'm trying to establish a GRE over IPSec tunnel between two MikroTik devices. Everything seems to work yet when I sniff the WAN interface I can clearly see the GRE packets which theoretically I shouldn't be able to see.
I've spent a few days on this and I'm at a loss on whats missing.
18.104.22.168 is the datacenter WAN, while 22.214.171.124 is the home WAN.
/interface gre add allow-fast-path=no !keepalive local-address=126.96.36.199 name=\ gre-tunnel-home remote-address=188.8.131.52 /ip ipsec peer add address=184.108.40.206/32 dh-group=modp8192 enc-algorithm=blowfish \ hash-algorithm=sha512 lifetime=30m local-address=220.127.116.11 \ nat-traversal=no proposal-check=strict secret=secretcode /ip ipsec policy add dst-address=18.104.22.168/32 proposal=proposal1 sa-dst-address=22.214.171.124 \ sa-src-address=126.96.36.199 src-address=188.8.131.52/32 tunnel=yes
/interface gre add allow-fast-path=no !keepalive local-address=184.108.40.206 name=\ gre-tunnel-datacenter remote-address=220.127.116.11 /ip ipsec peer add address=18.104.22.168/32 dh-group=modp8192 enc-algorithm=blowfish \ hash-algorithm=sha512 lifetime=30m local-address=22.214.171.124 \ nat-traversal=no proposal-check=strict secret=secretcode /ip ipsec policy add dst-address=126.96.36.199/32 proposal=proposal1 sa-dst-address=\ 188.8.131.52 sa-src-address=184.108.40.206 src-address=220.127.116.11/32 \ tunnel=yes