bridge mode with vpn

RouterOS Beginner Basics
1

i am new to mikrotik. I would like to know is it possible to have the mikrotik cloud switches set as bridge mode and at the same time configure VPN on it?

What I would like to do is have some servers behind the mikrotik using LAN IP. In order to connect to these server, I would need to use VPN. Maybe have certain port on the switch configured for this?

But the rest of the devices will be using bridge mode with public IP.

Thanks.

2

Yes, you can configure a CRS to route some interfaces and bridges others. Also, you can bridge two [or more] networks with a VPN, or route between them, across a VPN.

3

wow..good to know it can be done with mikrotik.

Can you provide some guide on how to do this? Perhaps some available tutorial or some sort simple instructions?

Thanks.

4

after doing a little bit more googling, I think I have the idea on how to do this.

So basically I will need to group the ports up. Probably create another group called group-lan which is port 17-24. This group will be used for internal IP and VPN. Then I assign locate IP address into this group? Is this correct? Please comment.

Thanks.

5

Set ports 18-24 with a master port of 17, set port 17 to have a master port of none. This will make ports 17-24 their own L2 domain, separate from 1-16. You can then assign an IP address to port 17.
Note that the canonical way to do this with ROS would be to create a bridge with ports 17-24 in and put the IP on the bridge but things are a bit different with CRS.