Select a VPN or something to do........

Well this is the first time i try to make a VPN or similar. I have Two routerboards 532 in different countrys with different ISP. I need to make a Tunnel to connect two lan behind this mikrotik but i don´t know which is the best way to do this. I only need to connect this two lan trough mk and need that configuration to be transparent to the pc´s.

At the moment this is the scenario:

R1: Eth1 (Wan ISP Argentina, IP: 200.80.xxx.xxx/29)
Eth2 (Lan 192.168.1.0/24)

R2: Eth1 (Wan ISP USA 69.95.xxx.xxx/24)
Eth2 (Lan 10.0.0.1/24)

Please tell me which is the best method to do this… is PPTP, L2TP, EOIP, IPIP,VLAN or other way?


Thanks

Gustavo

vlan is not going to do anything for ya.

Depends on the traffic really, and the type of connection. There is also IPSEC. PPTP is more prone to dropping, as it is a connection based or TCP protocol . It is the most common though as far as VPN connections are concerned. Mostly used though for remote access to the office by client workstations. Between sites, IPSEC is the most common as it is the most protected as far as encryption. I find it to be processor hungry though, and typically don’t use it. L2TP is UDP based, and if you have high latency between the connections etc, this may be the way to go. Simple to setup, easy to route, and has the same encryption as PPTP tunnels for the most part.

if your providers are less than rock solid, I would do L2TP, you can also contact a MT consultant, as they should be able to help you route this correctly as well. If you have good solid connections, then PPTP will work. Another thing you can do is run a L2TP or PPTP tunnel with MPPE encryption and then run IPSEC encryption on TOP of that. I have done this before, however, it DOES eat some processor time.

(this is an open forum, as long as it’s not actual spam, anyone can post anything mikrotik related and anyone can use signatures as long as they are not bigger than messages above them)