Hey,
I’m fairly new to the RouterOS world (but not new to comms) so I was just wondering on what you would recommend for this scenario.
I have two sites connected via a microwave link as primary and I would like to add an IPSEC tunnel over the internet as a secondary route if the microwave link goes down.
What configuration would you seasoned Mikrotik uses recommend for this scenario? Remote sites are RB750 and primary site is RB1100.
Cheers.
You can use OSPF in that case. It is made for these situations.
You will have to use a tunnel protocol and then use IPSec to encrypt the tunnel traffic for it to work properly (GRE, EoIP, L2TP, etc.). Otherwise each MikroTik will see the traffic you have designated to be sent down IPSec and will grab it instead of allowing it to flow normally over the microwave link. You will also need to enforce some policy based routing to force the tunnel and IPSec traffic to ever only use the internet connections.
Then on top of the tunnel you will want to run some kind of dynamic routing protocol, such as BGP or OSPF to handle the rerouting in the case of a failure.
The 750’s will probably allow you around 20 Mbps of encrypted traffic, just as a FYI.