Mikrotik to Mikrotik VPN - Dynamic IP

RouterOS General
1

Hi,

Ive had a search around the forums but cant seem to find a definitive answer on this

What I’m trying to achieve is a mikrotik to mikrotik vpn or site to site to be official.

This is for a home setup, id like to be able to connect 2 home networks each with their own mikrotiks. I already have a dial in L2TP VPN for my current home network using a dynamic IP address but what i want to achieve is a permanent connection between the 2 homes so that we can share services. I run quite an extensive home network…Hyper V virtual servers, internal websites and facilities such as home automation & file sharing. Id like to be able to also use this as a way of doing off site backups to each home.

Can someone explain the best way or a guide if there is one to achieving this but with the issue of having a dynamic IP address…or if its even possible?

2

Put addresses at both ends of the ppp link /examp. 10.100.0.1/30 and 10.100.0.2/30 /.Route home networks over this addresses / add static route in main routing table for each home network respectively/ and make an exception in filter section on firewall for accepting the traffic between them .

3

Hi yeah thanks for pointing that bit out, thats the bit I already know how to do

What main crux of my question was how to do this with a dynamic public IP address at both ends.

4

Choose the one of routers for vpn server and use cloud /ddns/ for establish the ppp connection !

5

There is no way to accomplish a “true” peer to peer connection without the use of script?

6

check this link…it should guide you through the process along with the script
https://blog.pessoft.com/2016/05/29/mikrotik-ipsec-tunnel-with-ddns-and-nat/

7

see this..

https://blog.pessoft.com/2016/05/29/mikrotik-ipsec-tunnel-with-ddns-and-nat/

8

I just subscribe to a free dyndns service, like no-ip.com. I have a pc thats on already 24/7 on my network run their free client that updates the public every 5 minutes, and then I can connect my vpn clients (mainly my phone and travel router) to xxxxxxx.ddns.net and my vpn works flawlessly behind a dynamic address. No scripts needed.