How can I have a vpn server ( Layer 2 Tunneling Protocol)

Hi everyone
I would like to have a VPN SERVER ( Layer 2 Tunneling Protocol) -------> for remote controlling of my and my friends devices such as DVRS
what accuratly should I do?
1- type of mikrotik router board.
2- should I have a puplic ip from my ISP.
3- How do I programe the mikrotik
My thanks and appreciation for any one give me any information about the subject

  1. It depends on your budget and needs - I would personally go for a RB5009 but a hEX would also do a great job

  2. Definitely yes

  3. https://help.mikrotik.com/docs/spaces/ROS/pages/2031631/L2TP

or

https://mikrotikmasters.com/mikrotik-l2tp-vpn-server-with-ipsec/

  1. Why don’t you use Wireguard? It’s much easier to set up

THANK YOU SO MUCH
if I use Wireguard ,should I have a puplic IP ??
what do I need exactly?

A public IP is a premise for every VPN server. However, if not acquirable and the setup is home/SOHO, there is this thing called BTH (Back To Home), which is basically Wireguard + Mikrotik relay server for public IP and hole punching if behind CGNAT.

More info on them:

https://mikrotikmasters.com/setting-up-wireguard-on-mikrotik-a-comprehensive-guide/
https://help.mikrotik.com/docs/spaces/ROS/pages/69664792/WireGuard
https://help.mikrotik.com/docs/spaces/ROS/pages/197984280/Back+To+Home



********THANK YOU SO MUCH *********