MikroTik IPsec HA: production-oriented summary

What this repository proves

Recommended production model

Service model

Branch model

Policy model

Main design decision: templates, not one hardcoded profile

Most important RouterOS finding from the lab

What did not work reliably on ROS7 responder

What did work reliably on ROS7 responder

Confirmed lab results

1. IKEv1 compatibility template

2. IKEv2 default template

3. Sticky split across multiple branches

4. Service-name failover/failback

Operational expectations in production

Suggested automation/inventory shape

Files to start from

Short production recommendation