Fair enough, Perhaps your option 2 would be a good option, you then effectively have a site to site tunnel, and can tunnel whichever clients you want. Option 1 is doable and will most times be fairly well upgraded. However it is not perfect. (Make a script export and a normal backup onto external s...

I would recommend you experiment with wireguard. (Even if just for this particular instance) I've looked into that, but if im not wrong I need to update my Mikrotik to ROS 7.XX , and I don wan't to doit until im sure everything else works. But for what i've read wireguard is pretty straight foward ...

Hi, I work in IT and have configured an L2TP/IPsec VPN so other devices from outside my LAN can connect to a very unsecure and old web app that I don't want to be reachable from outside my LAN. The solution was working well with clients using the integrated Windows VPN configuration to connect to my...