Configuring RB2011 as VPN Remote Access Server

RouterOS General
1

Hi all,

I’ve had my Mikrotik RB2011 for a few weeks and so far it’s been great.

I’m trying to configure the router as an IPSec Remote Access Server to allow me to connect into my home network when I’m out and about. I had previously used MerlinWRT on an Asus router with an OpenVPN Client on my Android phone and it worked really well, so I’d ideally like to emulate that setup. Certificate-based authentication is a must.

Having spent the last week googling, I’m still no wiser on how to achieve this. I’ve followed a few of the half-baked guides I’ve been able to find online but they’ve not worked.

I was wondering if anyone knows of any really good reliable guides to getting this set-up, or if anyone might be able to share their working config (with redacted credentials obviously!)

Fingers crossed Someone can help!

2

Look into SSTP VPN, works great for me, very secure and uses certificates

3

I second this recommendation. I have several in production now. It’s a very simple VPN to set up compared to IPSec client-type connections.

4

Thanks for the suggestion guys - SSTP does look like a decent alternative. I mainly use my mobile device for remote access, which runs Android - are you guys using Android, and if so can you recommend a good VPn client that supports SSTP?

My preference is still to use OpenVPN, but SSTP may end up being the only show in town.