Using WISP network to link Bank Branches together

RouterOS Wireless Networking
1

I run a WISP, my company also have a Microfinance Bank with about 6 Branch Offices, can I link these branches together with my network. What about security issues. Thanks.

2

Yes, you can link them together, even if they are outside of the clear line of sight [direct connection].
It’s possible to use EoIP on MikroTik, that allows to establish Ethernet tunnel of IP networks.
You can use PPTP or L2TP together with EoIP to enhance security on the link,
http://www.mikrotik.com/testdocs/ros/3.0/#Virtual%20Private%20Networking

3

It may be wiser for you to just provide the link with wpa2, aes etc , but let the bank provide their own security & draw up a clear contract about this.

4

From expwerience, i advice you to use seperate radios for their connection instead of routing them via your network. You will be question if not held responsible for any loophole be it from their it or anywhere. You can colocate it for them, but let them have full control of their security issues except if a clear line of contract is drawn of your responsibility and theirs. Also have in mind that most microfinaces belongs to owners of all these mega banks or the banks themselve.

Thanks.

5

IN todays world we always are trading security for ease of use, and thats what rolling wireless to banks would do. IMO banks should be required to use dedicated lines that run to a colo that is underground in concrete and ported to a secure room in the telecom and under surv 24/7. Granted anything given enough drive and will power can be hacked, and or social engineerd. Hek if i could get the account i would , but make sure you have a laywer draw you up a contract that doesnt make you responsible in anyway for data loss or tampering. Oh and i wouldnt have anylink into the network unless hired to secure it in which in any case you could and would be considerd a suspect if anythign happend

6

i have a similar case in front of me today… there is a bank with a HO and around 14 branches. We plan to use 3G dongles + DSL at the branch locations and connect them through internet to the H.O. to keep their communications costs low.

i want to use Mikrotik at every place… now wondering how to make the road map to achieve this.

7

Mikrotik should allow site to site VPN.
Try it with dongles or dsl connections.
But I guess you will be needing static+public IP at each site.

8

i suppose we will only be getting public ip in case we go with the 3G USB dongles…

but that can be addressed using the NO-IP Dynamic DNS Service…

what say?