VPN Site to site

Please i have 2 routerboad 450 i need to make VPN site to site between each other

Please help

IPSec is a good place to start
http://wiki.mikrotik.com/wiki/Manual:IP/IPsec
That’s a lengthy read, but IPSec is probably the best bet.

Some ISPs that issue modems with a router built in may disallow IPSec.

you can use pptp os l2tp with IPSEC

Set IP on the VPN sever router E.g local=192.168.1.1 remote=192.168.1.2

it will work

PPTPconnction without IPSEC too will work just that less secured

Hi,

you can check the following documents:

http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP
http://wiki.mikrotik.com/wiki/Manual:BCP_bridging_(PPP_tunnel_bridging)

good luck…

Stick with plain IPSec in tunnel mode for site-to-site, supposed to be better performing. I use pre-shared keys instead of certificates because it’s quicker to setup.

+1 - plain old IPsec in tunnel mode is the best for S2S- flexible, secure and performing. The only “disadvantage” is it requires some learning. And pre-shared key auth method should be just fine for S2S.

I second the IPsec recommendations.
But: which bandwidth do you expect to be encrypted? If it’s just some few MBit < 5, the 450 will for sure be able to handle this. If you’re talking about more, better consider either different hardware (850, 1100, CCR series) or a non-IPsec approach.

-Chris

I’d argue the non-IPsec approach is worth considering, unless you don’t care about encryption at all.

Or think about 1100ahx2 with hw ipsec acceleration.