Good Morning Everyone, I need to do a setup for one of my clients and need some expert advice: Which Mikrotik Routers are best suited for the task at hand? Head office will serve as the "VPN Server", as it is the only one that has a static ip. RB2011 for HO? HAP Lite for the Branches? 13 B...

Evening,

Im to accomplish exactly this, is there any example of what the firewall rules should look like?

Karel

@Sindy Thanx for that. I missed that rule. Now hopefully my last question for the VPN.... Would I be able to add a Laptop to the VPN Connections? AND it have access to all the sites? It would be a Roadwarrior as the person is on the Road most of the time and needs to be able to connect from anywhere...

@Anumrak,
I also need Hairpin NAT. Could you be more specific in the setup? Give example CLI commands to setup?
I do have a Dynamic WAN IP and NOT a static WAN IP

Thanx
Karel

Evening Sindy, Apologies for only replying now. My actual problem was the routing, but was corrected by MKX's suggestion. The reason hy it didnt work, was that the Linux server I was testing from, had an openvpn connection running, and that routed 192.168.15.0/24 via the openvpn connection. :evil: M...

Hi , Sadly that didnt work. Site A Routing /ip route> print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S ;;; General Route to Internet 0.0.0.0/0 1...

So I finally got VPN working, now I just need some assistance with the routing. From a PC on HO Network I can access PC's on site A and Site B network. But from a PC on Site A, I cant access a PC on Site B network, and vice versa. Keep in mind that Site C, D and mobile laptop still needs to be added...

So I finally got it working, now I just need some assistance with the routing. From a PC on HO Network I can access PC's on site A and Site B network. But from a PC on Site A, I cant access a PC on Site B network, and vice versa. Keep in mind that Site C, D and mobile laptop still needs to be added ...

So it seems that my problem was firewall rules on the HO Mikrotik :-x /ip firewall nat add chain=dstnat action=dst-nat in-interface=<your WAN interface> protocol=udp dst-port=500 to-address=192.168.88.113 to-address=500 add chain=dstnat action=dst-nat in-interface=<your WAN interface> protocol=udp d...

I have tried the steps in the below thread aswell...... no Luck... :( You can find the basic config for a l2tp server, mikrotik client and widows client below, you can put the IP address of the local and remote side in either the profile the secret is using or in the secret. A good idea would be to ...

Evening Everyone, I'm trying to setup SITE to Site VPN, HO with 4 remote sites and a user connecting with a Laptop. I have used the instructions from https://wiki.mikrotik.com/wiki/PPTP_VPN_-_multiple_ADSL_remote_locations_to_Cental_Office and https://wiki.mikrotik.com/wiki/Manual:Interface/L2TP but...