Hello.
Is there a way how to bridge port on one mikrotik to another mikrotik using existing vpn?
I want to join Device 1 and Device 2 to one isolated L2 network. Is it possible?

Of course.Just bridge ether ports via unique vlan or directly.

i think he want to make l2 over vpn. try with eoip

Sent from my Moto G (5) Plus using Tapatalk

L2TP L2 Briging is no Problem

With EOIP I will find MTU Issue...

https://wiki.mikrotik.com/wiki/Manual:B ... _bridging)

i think he want to make l2 over vpn. try with eoip

Sent from my Moto G (5) Plus using Tapatalk

He said over existing vpn.

L2TP L2 Briging is no Problem

So I just need to bridge eth1 interface and l2tp interface?

L2TP L2 Briging is no Problem

So I just need to bridge eth1 interface and l2tp interface?

L2TP is layer 3 vpn, so no. You should shift l2tp to eoip and bridge ethernet interfaces with it.

You should shift l2tp to eoip

If i dont mistake, EOIP doesn't work over NAT and it is insecure.

So, i shall to encapsulate EOIP over L2TP?

You should shift l2tp to eoip

If i dont mistake, EOIP doesn't work over NAT and it is insecure.

So, i shall to encapsulate EOIP over L2TP?

No, you need to ruine l2tp, create eoip over ipsec and set ip address space in eoip interfaces.

...sorry. that is what i said? l2tp vpn...and then eoip tunnel

Sent from my Moto G (5) Plus using Tapatalk

...sorry. that is what i said? l2tp vpn...and then eoip tunnel

Sent from my Moto G (5) Plus using Tapatalk

No. I said that he must delete l2tp vpn and create new one with eoip. Lets just add as much headers as possible: ip over l2tp over eoip over pptp over ipsec(sarcasm).

..so you say that must be eoip from wan to wan and then secure with ipsec?

Sent from my Moto G (5) Plus using Tapatalk

Raceboy you are wrong!

From Wiki:
With L2TP, a user has a Layer 2 connection to an access concentrator - LAC (e.g., modem bank, ADSL DSLAM, etc.), and the concentrator then tunnels individual PPP frames to the Network Access Server - NAS. This allows the actual processing of PPP packets to be separated from the termination of the Layer 2 circuit


We use that every day in our WISP Network, it is a Layer2 VPN if it is used in the right way!
And with MRRU you don’t have to worry about the MTU

Setup 2 Profiles one on every side with bridge in it, don’t forget to setup Admin Mac, in the Bridge, and you’ve got an L2 VPN

ok. thanks. i dont say im wright:) but only with eoip i can make multicast iptv pass through

Sent from my Moto G (5) Plus using Tapatalk