I should note that
is really just equivalent to
on side A and
on side B. In fact, I originally tested the ip-based rules and made them into policy-based after the fact because it seemed more appropriate.
In reality, I have the rule placed after 'drop invalid' rule and not at the top of the list.
Code:
/ip firewall filteradd action=accept place-before=1 chain=input ipsec-policy=in,ipsec protocol=greCode:
/ip firewall filteradd action=accept place-before=1 chain=input src-address=Y.Y.Y.Y protocol=greCode:
/ip firewall filteradd action=accept place-before=1 chain=input src-address=X.X.X.X protocol=greIn reality, I have the rule placed after 'drop invalid' rule and not at the top of the list.
Statistics: Posted by Nullcaller — Tue Jan 30, 2024 10:56 pm