VPN Advice, suggestions

I have a rather large network all on 192.168.1.XXX with two default gateways. My main gateway is at 192.168.1.14, which is a RB450G that goes to my primary cellular connection. Because its cellular, it doesn’t have a routable/pingable public IP, but i get decent bandwidth. I have another gateway at 192.168.1.28 which is another RB450G that goes to a bonded bridged dsl connection. I have a VPN server here, and this connection connects to my network with a flaky wireless link with a 3’ 2.4 grid mounted 40’ up a pine tree. When the wireless link goes out, or when I want faster throughput, I would like a VPN between 450’s to send network data through. I know typically you would want the networks to be in different ranges but thats not possible. Which VPN would work best for me to keep everything on the same network and make a L2 bridge over vpn??? New to VPN’s. TIA - Tom

Anyone?

Hi Tom,

if your DSL-450G has a public IP address, you could set up a L2TP Tunnel between the two 450Gs and bridge that to your 192.168.1.XXX interface on both sides. The DSL-450G would be the L2TP server, the LTE-450G the client. In case your DSL IP address is not static, you need a service like dyndns. Firewall on the server also needs some modification to accept connections. I strongly recommend using L2TP over IPSEC so what passes the internet gets encrypted - rather easy in recent ROS versions, just check “Use IPSEC” and set the same key to client and server. Once the L2TP Tunnel is running, it can be added to a bridge:

https://wiki.mikrotik.com/wiki/Manual:BCP_bridging_(PPP_tunnel_bridging)#BCP_Configuration_.28Winbox.29

Hope those hints are helpful, I’m a little time constraint due to the upcomming holidays, but will gladly elaborate later.

Works seamless!! Thanks!!

You’re welcome, glad it works. That pine tree setup sounds adventurous :slight_smile: