Hi,
I need to connect two LANs with tunnel and give access to all devices. In each LAN there is MT router on the edge. Unfortunatelly, one of these Internet accesses is without public IP. I used to use IPSec to connect both LANs, but since there is no public IP, and it is changing from time to time, I am pretty sure it won’t work this way. What would be the best way to securely enough connect these LANs?
Do you need routed access between sites or must the be on same layer 2 network?
If routed, look at SSTP tunnel with one side that does not have public IP as a client and dial into the other site.
If you need layer 2, then look at bridge control protocol over SSTP
I don’t think I need any routing. These are simple home LANson both ends, but I want all devices to see each other from LAN1 to LAN2 and back. I guess SSTP bridge will be enough.
Thanks for the hint.
If you’re using anything with HW encryption do a initiator-responder setup with IPSec IKEv2…
It’s not the MOST straightforward setup in the world, but will likely produce better throughput than any other solution on these devices.
See my thread here and ask if you have any questions:
http://forum.mikrotik.com/t/ikev2-road-warrior-nat-workaround/124001/1