Community discussions

MikroTik App
 
zark
just joined
Topic Author
Posts: 4
Joined: Tue May 26, 2020 3:56 pm

Mikrotik as VPN Server in existing network

Wed Oct 21, 2020 1:39 pm

Hello

I'd like to install a mikrotik device as a VPN server in an existing network.
Basically it should have a static ip in the network, have the VPN server and that's it. no NAT, no DHCP server, etc..
VPN Traffic should just route thru it.

Is there any special configuration i should consider ? I was thinking of just putting a static ip on a bridge, and then setup the vpn server. Will this work or am i missing something ?
(It seems too easy)
 
Sob
Forum Guru
Forum Guru
Posts: 9121
Joined: Mon Apr 20, 2009 9:11 pm

Re: Mikrotik as VPN Server in existing network

Wed Oct 21, 2020 3:56 pm

It depends. If you need it for accessing LAN (not just routing traffic thought it to internet), you need to make sure that other devices will know how to reach VPN clients. If you want to put clients in different subnet, you need route to it from main router. If you want to use same subnet, then proxy arp will do the trick.
 
zark
just joined
Topic Author
Posts: 4
Joined: Tue May 26, 2020 3:56 pm

Re: Mikrotik as VPN Server in existing network

Thu Oct 22, 2020 10:43 am

Well i basically need it to access LAN computers from outside.
I want the vpn clients to have an ip from the main dhcp server.
So just the basic VPN setup for remote working.
 
tdw
Forum Guru
Forum Guru
Posts: 1855
Joined: Sat May 05, 2018 11:55 am

Re: Mikrotik as VPN Server in existing network

Thu Oct 22, 2020 2:22 pm

I want the vpn clients to have an ip from the main dhcp server.
That isn't going to happen unless you use a layer 2 VPN (so OpenVPN TAP or Mikrotik-to-Mikrotik EoIP).

Whilst layer 3 VPNs (OpenVPN TUN, SSTP, L2TP/IPsec, etc.) can be used with proxy-arp so the VPN clients can appear to be part of a local subnet, they are not. The VPN client address assignment uses other mechanisms, e.g. IPCP for PPP-based protocols.

Who is online

Users browsing this forum: damoncze, GoogleOther [Bot], pama and 112 guests