Assign VPN to a VLAN

RouterOS General
1

I would like to assign VPN to a VLAN, the VPN can be PPTP / SSTP.

But unable to see the PPTP / SSTP interface in Bridge / Vlans in order to assign Vlan to it

Is it possible, if so, how?

2

The title seems inverted as compared to the body, so what is the actual requirement?

Both PPTP and SSTP tunnels are L3 ones, so they cannot be used as carrier interfaces (i.e. the tagged side) of /interface vlan. For the same reason you cannot make endpoint interfaces of these tunnels members of bridges.

So the only way is to create an L2 tunnel using EoIP or L2TP in bridge mode inside the PPTP/SSTP tunnel, or an OpenVPN tunnel in bridge mode; although the bridge mode of L2TP is standardized, I don’t know any other equipment than Mikrotik which would support it, so EoIP is likely to be a better choice as it is less complex internally than L2TP. Mikrotik’s OpenVPN implementation is famous for being TCP-only, but that’s no disadvantage as compared to SSTP, and OpenVPN in bridge mode will have less overhead than EoIP over SSTP.

So all in all, I would use an EoIP tunnel over IPsec :slight_smile:

3

Ahhh sindy, you always come and shoot down my dreams. But in a good way, you keep me from straying of the straight and narrow :slight_smile:

Thank you again and always appreciate your input