IPSec Tunnel Behind Router!

RouterOS General
1

I want to build the following solution ,

I have one mk 10.0.0.1 whichs is connected to the internet with a public ip 2.2.2.1
from the other side , is a broadband modem with public ip 1.1.1.1 and local 192.168.1.1 , where
a mikrotik is connected on port eth0 with ip 192.168.1.2 and gives to eth1+ dhcp to the local lan 192.168.88.0/24 .

How can i made an IPSec tunnel between two mikrotik ?

The problem is that the broadband modem cannot be replaced or to be work in bridge mode , so mikrotik has to be always behind him.

:open_mouth: :open_mouth: :open_mouth:
snap.jpg

2

The problem is that the broadband modem cannot be replaced or to be work in bridge mode , so mikrotik has to be always behind him.

The broadband router should be the device where the VPN tunnel must be terminated, otherwise
you must be sure that the broadband router is offering the function or option “vpn passthrough”
that allows you to terminate the VPN tunnel at the WAN interface of the MikroTik router.