Mikrotik set up to access lan remotely (via vpn?)

RouterOS Beginner Basics
1

Hi all,

I am a newbie and I am looking for some help.

I need to VPN into customer networks and want to set up a Mikrotik RB750 or similar in each client site. Once I vpn in I then need access to the entire lan.

Would I be on the correct track thinking like this?

  1. I do not want to interrupt the lan by physically placing the Mikrotik between the customer existing router and his lan. I would then plug in the Mikrotik to the local lan using ether1 and ether2, into any 2 ports on the existing switch.
  2. Create interface ether1 as wan and ether2 as lan.
  3. Set internal/external i.p. addresses
  4. Create bridge
  5. Set system identity
  6. Set System – Logging
    a. Add IPSEC to Action - memory for help in logging vpn issues.
  7. Change clock and time zone
  8. Create an address and a static i.p.
  9. Create DNS client
  10. Do not create DHCP server as one already exists
  11. Create DHCP Client in order to obtain I.P. from router
    a. This will also auto populate routes
  12. Create bridge and assign ports
  13. Enable default route
  14. Enable NAT as srcnat = masquerade using bridge1
  15. Set up firewall protection rules
  16. Ensure I can see the local lan and can ping 8.8.8.8

All done. I can ping external as well as internal. What are my next steps? Any help would be much appreciated.