fairly new to MikroTIK, I have some experience with cAP eqpt so vaguely aware of the complexity of this stuff compared to other products.
I would like to share my LAN between two sites.
site A has retail fibre broadband connection
site B has retail ADSL broadband connection
700 miles between the two sites.
primary objective is to enable a VOIP telephone at site B to connect into the PBX which is running on the LAN at site A
secondary objectives is to provide a (virtual) LAN to both sites so that various equipment (streaming cameras, SDRs, NAS etc) can be accessed from either site “as if” they were all on the same LAN.
Can I implement a VPN to achieve this?
if so, what is the topology?
do I still need to use the existing modem/routers at eitehr site or does a IP-tunnelling capable router supplant these devices?
Perhaps better asking this question in the beginners, or general forums.
If your existing gateway/routers have the option of setting up static routes,
I think you can probably just put a Mikrotik inside each of the networks and keep the existing gateways.
Perhaps in this case a pair of hex refresh’s would be sufficient, (and certainly would give you a fairly inexpensive idea of where you might want to go if not sufficient)
I would use a Wireguard VPN, set the MTU correctly, (1420 for a 1500 outer MTU, perhaps 1412 or 1400 if pppoe is used)
With appropriate static routes in the 2 networks default gateways, and within the mikrotiks.
And perhaps some MSS clamping for traffic entering or leaving the wireguard interfaces.
Lan1 — Mikrotik1 Lan1 IP --MSSClamping-- Mikrotik1 Wg IP ===Internet=== Mikrotik2 Wg IP --MSSClamping-- Mikrotik2 Lan2 IP – Lan2
Should ideally not require any NAT on either Mikrotik1 or Mikrotik2
Static Routes in Gatway devices
Lan1 Route to Lan2 IP range via Mikrotik1 Lan1 IP
Lan2 Route to Lan1 IP range via Mikrotik2 Lan2 IP
Optionally:
Lan1 Route to Mikrotik2 wg IP via Mikrotik1 Lan1 IP
Lan2 Route to Mikrotik1 wg IP via Mikrotik2 Lan2 IP
Static Routes in Mikrotik devices
Mikrotik1 Route to Lan2 IP Range via wg (or Mikrotik2 wg IP)
Mikrotik2 Route to Lan1 IP Range via wg (or Mikrotik1 wg IP)
Wireguard allowed ip ranges.
Mikrotik1 wg peer for Mikrotik2 needs to allow Lan2 IP range, as well as Mikrotik2 wg IP
Mikrotik2 wg peer for Mikrotik1 needs to allow Lan1 IP range as well as Mikrotik1 wg ip