Good day,
Please help with advice for the first time faced with microtia, enjoyed a popular article, network for Mikrotik and several VPN networks for Kerio Control,
the network diagram is exactly the same screen 001,

in Kerio Central 11.1 prescribed in the VPN tunnel the local subnet for example 20.0/24, Mikrotik she Policies appeared. As prescribed NAT on that subnet over the masquerade. But unfortunately it doesn't ping this subnet. The tracert command is 192.168.199.1 further 192.168.11.1 then have lost.
Another question, Mikrotik can be done as an asset? Kerio is why it connects easily when Mikrotik passive checked, and Vice versa does not work.