Site-to-site VPN

RouterOS Beginner Basics
1

Hi all,

I have two mikrotik routers an RB450G and a RB750G. I need to setup a site-to-site VPN on them, as well as setup NAT and authentication. One of the routers will be installed at site A and the other at site B. Basically they will serve as a tunnel for our PABX VOIP system over an ADSL CIP Internet connection. See topology

Any idea how I can set them up? any tutorial about this kind of setup? I ve been given some information from our ISP which we need to configure on the routers.

PS: eventually I will also need to add a 3rd router and will have to setup a mesh VPN.

Thanks all for your help.

2

There are many ways to do this. When you know how your internet will be connected (eg ppp) then tell us. you’ll need to confirm ip addressing at each site too, subnets and exisiting ip’s for routers etc

Sent from my GT-I9100 using Tapatalk 2

3

I would probably do an IPSEC site-to-site in transport mode and put an IPIP tunnel on top of it. Makes routing very easy and limits the number of SA pairings you have to put in the IPSEC config.

There are many example configs in the Wiki:

http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Site_to_Site_IpSec_Tunnel

4

I got this info from our ISP:

One usable IP: 197.203.117.34 255.255.255.252

How can we configure both routers with just one usable IP?