Bridging VPN Network to physical port

RouterOS Beginner Basics
1

Hello,

I am new with RouterOS.
Currently I have two locations with Drytek’s routers. There is an IPSec tunnel between them.
Now, I have one device in location B, which need’s not only to see device in location A, but it also needs to be in the same subnet. Unfortunately Drytek device does’nt support bridge mode to physical port on VPN connections.
I was wondering if it’s possible to resolve this problem using simple Mikrotik router. I am thinking about:

  1. Setting it in bridge mode (more like a switch than router) in location B
  2. Setting another VPN connection (as client to location A) - L2tp
  3. Bridging L2TP VPN interface to physcial port of Mikrotik router.

I am wondering if what I came up with is even possible. Maybe there is any simplest way to resolve this problem?

2

What you are searching is EOIP. I’m using it to transfer a complete VLAN with Multicast IPTV to another location. Works perfectly.

https://help.mikrotik.com/docs/display/ROS/EoIP

3

Thank’s! I was reading about it, but I am wondering if:
*will it work, if server is not mikrotik and I can only make Ipsec/L2tp diall in options?
*is it possible to establish EOIP on router which is in bridge mode?

4

No, server must also be Mikrotik device. It’s their protocol.

Maybe someone else will have an idea how to implement this if possible.

5

Maybe I can add two Mikrotik routers (as switches, one per location), and establish EOIP inside IPSEC Tunnel (without using public addresses).
In this scenario I am wondering if I can establish EOIP on device which is configured to behave like switch.
Configuring EOIP using private ip (ipsec) shouldn’t be the problem?

6

I think it should work. I have EOIP configured on a L2TP connection, because on the othere side there is PPPoE connection with changing IPs.

I think that there is no problem if device is configured as switch as long as it have internet connectivity.

You can take switch port out of bridge and add it to EOIP without problem.

7

Thank’s. In that case I will give it a try :smiley: