Спасибо за ответ, маршрутизатор — это "Cisco 1811" с ПО "Cisco IOS Software, C181X Software (C181X-ADVIPSERVICESK9-M), Version 12.4(2)T". Политика Mikrotik: src-address="IP":any dst-address="IP"/24:any protocol=all action=encrypt level=require ipsec-protocols=esp tunnel=yes sa-src-address="IP" sa-dst-address="IP" proposal=alla manual-sa=none dont-fragment=clear Полный лог Mikrotik: may/29/2006 09:47:46 queuing SA request, phase 1 with peer “PEER_IP” will be established first may/29/2006 09:47:46 initiating phase 1, starting mode Aggressive (local "LOCAL_IP) (remote unknown) may/29/2006 09:47:46 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:47:51 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:47:55 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:48:00 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:48:05 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:48:10 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:48:15 ipsec packet discarded: src=“SRC_IP” dst=“DST_IP” may/29/2006 09:48:17 dequeuing SA request to “PEER_IP”, phase 1 wait timed out Спасибо!