RB 1100AHx2 IpSec & Cisco phone on Same Subnet Over Inet

RouterOS General
1

WHat is the best way to configure this:

I have two RB 1100AHx2 at two locations, which will have thier own public IP address.
I want to create the BEST secured connection between the two.

The final goal is to have a CISCO 9971 phone on ether2 to be a part of the other sides subnet, so that it is transparent. This is so the Cisco phone can get DHCP from Site 1, and connecto to the Cisco Call Manager.

Site two has the same subnet, 192.168.1.0/24, but at this moment I do not need connectivity between the two networks, I will change the subnet of site two to simplify it later. For the time being I will leave its networkset up the way it is.


Site 1 ( Call Manager, Subnet of 192.168.1.0/24 RB 1100AHx2, Has Public IP on ether1)
Site 2 (Cisco 9971 Phone, needs Secure connection to Site 1, and Ether 2 has to be transparent to the phone, and get DHCP from site 1)

I do not need help with the DHCP set up and bridges, asigning IP’s etc. Just the Secure link between the two, and would I use a EoIP tunnel and Bridge ether 2 of site two to this to make it tranparent? but over an IPSec connection? Just not sure the BEST most secure way to do this. Future plans are to allow the other traffic, but for now I cannot change site 2’s subnet which is the same as site 1. This is becuase people always use the default subnets :slight_smile:

Thanks for the help in advance.

2

Well, didnt get any reponses, so I fiddled with it, and got a L2TP with IPSec and then a EoIP tunnel through that, and worked flawlessly. Cisco phone works perfect with no issues, now the second RB1100 has ether2 as an extension over the internet, and DHCP DNS and TFTP as if it was on the local lan. Just need to add a few rules to stop some of the broadcast data from going over the internet link.