EoIP possible with NAT on one side ?

RouterOS Beginner Basics
1

Hi,

I have the following configuration:
→ one site with Mikrotik and direct connection to Internet with fixed IP
→ one site with Mikrotik but transparent NAT done in fiber box (I can’t for now remove the box or put in pass-through mode)
I need to link both sites through VPN so I can use same IP class so is it possible to do (http://wiki.mikrotik.com/wiki/Manual:Interface/EoIP) EoIP VPN between two sites ? or it won’t work due to forced NAT on one side ?

Thanks for your advices,

Vincèn

2

EoIP is basically a GRE tunnel. So if you do a proper destination NAT for protocol GRE on each NAT box is should work flawless (on one side in you case - if your fiberbox allows this).
If it doesn’t, you can fallback to a client/server configuration like PPtP or OpenVPN, with the server component running on the exposed Mikrotik router.

3

hum I’m trying to setup it following wiki instructions but I’m confused at one of the last steps:

[admin@Our_GW] interface bridge> port add bridge=bridge1 interface=office-eth

I suppose I should replace office-eth by my local wan port, right ? I tried to put instead ether1-gateway which is my wan port but it doesn’t work :frowning: it states “device already added as bridge port” !

4

No one to help me ?

Thanks,

5

Run l2tp. And if need of eoip (l2tp is l2) run this over the l2tp tunnel. Then the traffic is udp, not gre

6

tutorial explaining how to setup l2tp vpn ?

Thanks,

Vincen

7

you will need, ppp profile. ppp user and a network (IP’s) to Connect to both sides.

If you want to use the l2tp as a bridge, have the defualt bridge option in ppp profiles.


when all is up, you can have a l2 net over this, but also, possible to Connect the eoip, to the address of the l2tp tunnel.

8

Thanks for all your advices, my only issue is I have been unable to setup correctly the eoip as I asked for help about one parameter I need to setup according to wiki but never got any help :frowning: