Hello
I’d like to install a mikrotik device as a VPN server in an existing network.
Basically it should have a static ip in the network, have the VPN server and that’s it. no NAT, no DHCP server, etc..
VPN Traffic should just route thru it.
Is there any special configuration i should consider ? I was thinking of just putting a static ip on a bridge, and then setup the vpn server. Will this work or am i missing something ?
(It seems too easy)
It depends. If you need it for accessing LAN (not just routing traffic thought it to internet), you need to make sure that other devices will know how to reach VPN clients. If you want to put clients in different subnet, you need route to it from main router. If you want to use same subnet, then proxy arp will do the trick.
Well i basically need it to access LAN computers from outside.
I want the vpn clients to have an ip from the main dhcp server.
So just the basic VPN setup for remote working.
That isn’t going to happen unless you use a layer 2 VPN (so OpenVPN TAP or Mikrotik-to-Mikrotik EoIP).
Whilst layer 3 VPNs (OpenVPN TUN, SSTP, L2TP/IPsec, etc.) can be used with proxy-arp so the VPN clients can appear to be part of a local subnet, they are not. The VPN client address assignment uses other mechanisms, e.g. IPCP for PPP-based protocols.